Senior Security Engineer, Threat Response

Our Security team keeps Asana's employees, users, and customers safe, by proactively addressing threats and fostering a culture of security throughout our product and operations.

We are looking for a savvy Security Engineer to join our Blue Team. You will be a foundational member of the security presence in our Warsaw innovation hub, partnering directly with IT, infrastructure, and product teams to ensure we have robust detection and response capabilities. Detection and response here leans o...

This role is based in our Vancouver office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do and the teams with which you partner. If you'r...

8+ years of experience in threat detection, security operations, or incident response, including investigating incidents across cloud platforms, identity providers, and SaaS applications, with practical knowledge of audit logging and IAM.
Proficient in Python (Bash, Go, or JavaScript/TypeScript is a plus) for security scripting and automation, with hands-on experience across REST APIs, Git workflows, and PR-based code reviews.
Hands-on experience investigating software supply chain threats, with fluency in auditing modern developer ecosystems (e.g., npm, PyPI), build logs, and CI/CD pipelines.
Familiarity with "Detection as Code" methodologies, including test-driven detection logic and rule management through CI/CD pipelines.
Strong experience with SIEM platforms (e.g., Panther, Splunk, Elastic Security) for log analysis, alert correlation, and dashboard creation.
Deep working knowledge of endpoint detection and response (EDR) tools (e.g., CrowdStrike, SentinelOne) with specialized expertise in macOS endpoint security, telemetry, and threat detection capabilities.
Experience performing digital forensics and root-cause analysis to determine incident scope and impact.
Familiarity with common attack techniques, tactics, and procedures (TTPs) and frameworks like MITRE ATT&CK.
Collaborative and pragmatic, with strong communication skills across technical and non-technical partners, committed to building robust defenses and helping engineers do their best, most secure work.
Demonstrated curiosity about AI tools and emerging technologies, with a willingness to learn and leverage them to enhance productivity, collaboration, or decision-making.