Senior Security Engineer

Cohesity is the leader in AI-powered data security. Over 13,600 enterprise customers, including over 85 of the Fortune 100 and nearly 70% of the Global 500, rely on Cohesity to strengthen their resilience while providing Gen AI insights into their vast amounts of data. Formed from the combination of Cohesity with Veritas' enterprise data protection business, the company's solutions secure and protect data on-premises, in the cloud, and at the edge. Backed by NVIDIA, IBM, HPE, Cisco, AWS, Google Cloud, and others, Cohesity is headquartered in Santa Clara, CA, with offices around the globe.

We've been named a Leader by multiple analyst firms and have been globally recognized for Innovation, Product Strength, and Simplicity in Design , and our culture.

Want to join the leader in AI-powered data security?
We are seeking a highly skilled Senior Security Engineer with strong expertise in Endpoint Detection & Response (EDR/XDR) tools (e.g., CrowdStrike Falcon), Security Information and Event Management (SIEM) platforms (e.g., Splunk, Google SecOps/Chronicle), Cloud Security across AWS, Azure, and GCP. The ideal candidate will have Deep investigation skills and cloud threat detection capabilities, Proven experience as Incident Commander during critical incidents, awareness of recent threats and adversarial techniques, Ability to quickly understand complex environments, Strong business and interpersonal skills to manage risks and collaborate with cross-functional teams

How You'll Spend Your Time Here

• Serve as a senior escalation point for high-severity alerts and incidents across on-prem, endpoint, and cloud workloads
• Perform deep-dive investigations into complex threats such as Cloud-native attacks, Malware and ransomware, Insider threats, Advanced Persistent Threat (APT) campaigns
• Correlate telemetry from EDR/XDR, SIEM, CSPM, and threat intel sources to detect sophisticated threats
• Lead Major Incident Response as Incident Commander, coordinating SOC, IR, Cloud, and IT teams
• Drive containment, eradication, and recovery for both on-premises and cloud security incidents
• Deliver comprehensive post-incident reports with actionable remediation guidance
• Lead and participate in Blue/Red team exercises to improve detection logic and align with MITRE ATT&CK
• Mentor SOC analysts and junior engineers in advanced investigations and cloud IR
• Review and update SOPs, protocols, and capabilities to address emerging threats
• Develop metrics and scorecards to measure Organizational risk, SOC operational effectiveness and efficiency

*WE'D LOVE TO TALK TO YOU IF YOU HAVE MANY OF THE FOLLOWING:*

• EDR/XDR: Strong hands-on experience with CrowdStrike Falcon
• SIEM: Expertise in Splunk and/or Google SecOps (Chronicle)
• Cloud Security: Skilled in cloud monitoring (AWS, Azure, GCP) and incident handling
• Incident Response: Proven track record as Incident Commander handling multi-vector incidents
• OS Knowledge: Deep understanding of Windows and Linux internals
• DLP Tools: Proficiency with MS Defender, Zscaler
• CSPM Tools: Familiarity with Wiz, Qualys, AWS Security Hub, Azure Defender, GCP SCC
• SOAR Platforms: Experience with Splunk SOAR, Google Siemplify
• Scripting: Python, PowerShell, or similar for automation (preferred)

Data Privacy Notice For Job Candidates
For information on personal data processing, please see our Privacy Policy
.
**Equal Employment Opportunity Employer (EEOE)

Cohesity is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, creed, religion, sex, sexual orientation, national origin or nationality, ancestry, age, disability, gender identity or expression, marital status, veteran status or any other category protected by law.

If you are an individual with a disability and require a reasonable accommodation to complete any part of the application process, or are limited in the ability or unable to access or use this online application process and need an alternative method for applying, you may contact us at COHESITY or

for assistance.
In-Office Expectations

Cohesity employees who are within a reasonable commute (e.g. within a forty-five (45) minute average travel time) work out of our core offices 2-3 days a week of their choosing.
Interested candidates based outside of the designated areas are welcome to apply, provided they have the right to work in the job location.