The opportunity
Our Security team keeps Asana's employees, users, and customers safe, by proactively addressing threats and fostering a culture of security throughout our product and operations.
What you'll do
Lead detection, analysis, and response across our cloud and SaaS: environments, identity providers, endpoints, and the software supply chain , ensuring timely and effective remediation of security incidents.
Investigate and remediate security incidents across cloud infrastructure: (AWS/GCP/Azure), identity providers (e.g., Okta), and SaaS environments.
Investigate and contain software supply chain and CI/CD incidents , from: unauthorized changes in build environments to suspect third-party dependencies (e.g., npm, PyPI).
Help build and maintain our detection-as-code infrastructure (e.g., Panther),: SOAR automation, and response playbooks, treating detection logic as tested, version-controlled production code.
Utilize and optimize security tools such as Panther for SIEM, CrowdStrike for: endpoint detection and response, and other security platforms.
Conduct proactive threat hunting and operationalize threat intelligence: across cloud, endpoint, and identity telemetry to catch threats beyond standard SIEM alerting.
What they're looking for
- Conduct forensic analysis during security incidents to understand the scope and impact of incidents.
- Collaborate with engineering teams to integrate security best practices into: development processes and provide guidance on secure configurations.
- Develop and deliver training to educate engineers on security operations and incident response best practices.
- + years of experience in threat detection, security operations, or incident: response , including investigating incidents across cloud platforms, identity providers, and SaaS applications, with practical knowledge of audit logging and IAM.
