Cloud incident response and defensive testing anchor this Staff Security Engineer opportunity at Fullscript. Work in-office, at home, or combine both.
You will lead investigations and improve response readiness across cloud infrastructure, identity, endpoints, applications, and AI services. This Staff-level role includes threat modeling, purple-teaming, adversarial validation, and on-call incident response. You will translate threat intelligence into detections while working with Engineering and Platform teams on telemetry, authorization, and access-control requirements.
Key Responsibilities: Lead security investigations through containment and resolution
Maintain response playbooks from investigation lessons
Threat model AI agents and existing systems
Coordinate indicator blocking across endpoint, network, and web layers
Evaluate access-control changes and drive remediation
Requirements: 8+ years in security engineering or incident response
Experience securing AWS or other cloud environments
Up-to-date SaaS and identity stack security experience
Adversary tradecraft knowledge, including MITRE ATT&CK;
Ability to partner on telemetry and control requirements
Strengthen Fullscript’s incident response, cloud security, and AI defensive testing with practical Staff-level engineering leadership.