Sr. Security Engineer, Incident Response

Responsibilities

• Act as the primary Incident Lead during high-severity events, owning the end-to-end response lifecycle from triage to post-incident root-cause analysis.
• Design and build automated workflows using Tines to automate triage, enrichment, and containment actions.
• Manage and fine-tune detection rule lifecycles utilizing CrowdStrike EDR and SIEM/SOAR capabilities.
• Monitor and respond to data risks across endpoints, identity, and SaaS applications using Cyberhaven DLP.
• Partner with infrastructure owners to ensure new systems include proper telemetry, encryption, and response playbooks.
• Participate in the scheduled Incident Response on-call rotation to ensure operational readiness.

Requirements

• 5+ years of experience in a dedicated Incident Response, SOC, or Security Engineering role.
• Proven track record of leading high-severity incident containment in fast-paced environments.
• Strong familiarity with the MITRE ATT&CK framework and modern adversary TTPs.
• Experience managing and tuning detection logic within CrowdStrike Falcon (or equivalent EDR/XDR) and enterprise SIEM platforms.
• Excellent leadership skills with the ability to coordinate cross-functional teams and communicate technical risks to stakeholders.

About the Company

Navan is the global AI-powered business travel and expense management platform that makes travel easy for frequent travelers. Powering travel programs at more than 10,000 companies, including Canva, HelloFresh, and DoorDash, Navan simplifies travel, payments, and expense management with intuitive tools and automated solutions.