senior cybersecurity incident response engineer (Remote, US)

Now Brewing – Incident Response Engineer Sr! #tobeapartner From the beginning, Starbucks set out to be a different kind of company. One that not only celebrated coffee and the rich tradition, but that also brought a feeling of connection. As an Incident Response Engineer Sr, you will be responsible for managing and running cyber security incident investigations across Starbucks. As an Incident Response Engineer Sr, you will: Identify and investigate security threats : You'll be the first line of defense, identifying, triaging, and digging into potential security incidents. Leading incident response efforts : When something goes wrong, you’ll help coordinate containment, remediation, and root cause analysis to ensure we resolve issues quickly and learn from them. Performing forensic analysis : Whether it’s on endpoints, across the network, or in the cloud, you’ll conduct forensic investigations to uncover how incidents occurred and what was affected. Creating and maintaining playbooks : You’ll document and implement runbooks and standard operating procedures to make sure our response efforts are consistent and efficient. Building tools and automation : You’ll design and develop capabilities that help us respond faster and smarter, including automation to streamline repetitive tasks. Supporting the team : You’ll act as a mentor and escalation point for junior team members, helping them grow and ensuring high-quality work across the board. Living our values : You’ll model and act in accordance with Starbucks’ guiding principles, contributing to a culture of integrity, collaboration, and excellence. We’d love to hear from people with: 5 or more years of experience in Information Technology, Information Security or similar disciplines. 2 additional years of experience in a Security Operations Center (SOC), Incident Response, or similar capacity responding to alerts and/or incidents. Effective written and oral communication skills with both technical and non-technical audiences. Deep technical understanding of modern Cybersecurity principles. Demonstrated experience with threat hunting for threat actor TTPs based on MITRE ATT&CK framework Ability to balance multiple priorities and meet deadlines. Ability to quickly learn new technology concepts. Understanding of compliance and regulatory requirements such as SOX and PCI. Strong collaboration mindset Excellent problem-solving abilities. Passionate about cybersecurity and self-driven to become an expert. This position contributes to Starbucks’ success through the investigation and response to cybersecurity incidents. You should have strong problem-solving skills, excellent communication skills, a deep technical understanding of modern cybersecurity threats and relevant protections against them. You consistently demonstrate ownership; if you see a problem, you step up and lead others to act; never assuming someone else will clean it up. You excel in collaborative environments where a multitude of people are required to get a job done. As a Starbucks partner, you (and your family) will have access to medical, dental, vision, basic and supplemental life insurance, and other voluntary insurance benefits. Partners have access to short-term and long-term disability, paid parental leave, family expansion reimbursement, paid vacation from date of hire*, sick time (accrued at 1 hour for every 25 hours worked), eight paid holidays, and two personal days per year. Starbucks also offers eligible partners participation in a 401(k) retirement plan with employer match, a discounted company stock program (S.I.P.), Starbucks equity program (Bean Stock), incentivized emergency savings, and financial well-being tools. Additionally, Starbucks offers 100% upfront tuition coverage for a first-time bachelor’s degree through Arizona State University’s online program via the Starbucks College Achievement Plan, student loan management resources, and access to other educational