Senior Security Engineer II

POWER A WORLD OF TRUST

Incode is the leading provider of world-class identity solutions that is reinventing the way humans authenticate and verify their identities online to power a world of digital trust.

Through our revolutionary identity solutions, we are unleashing the business potential of universal industries including finance, government, retail, hospitality, gaming, and more, by reducing fraud and transforming human interactions with data, products, and services.

We’re in the process of rapidly scaling our diverse global team and we’re looking for entrepreneurial individuals and leaders who are curious, driven, and excited by ownership to join a Unicorn-status scale-up!

About Incode

Incode is a Series B unicorn ($1.25 B valuation) rewriting how the world proves identity. Our AI-powered platform lets leading banks, fintechs, marketplaces, and governments deliver friction-free experiences while defeating fraud and safeguarding privacy. Customers such as Citi, AirBnB, Block, Chime, Sixt, and TikTok rely on Incode to power their identity verification and security. Recently named a leader in the Gartner® Magic Quadrant™ for Identity Verification, we’re scaling fast—and we need a product-marketing leader who can turn breakthrough technology into a category-defining narrative.

The Impact You’ll Make

As our Security Engineer, Detection & Response, you will be the architect of Incode’s frontline defense. You won’t just respond to threats, you will design and build the detection strategies, automation frameworks, and response playbooks that protect our customers, our platform, and our brand.

You will shape the future of security operations at Incode - defining how we detect, investigate, and contain threats across both corporate and production environments. Your work will directly influence our security posture, reduce risk at scale, and enable the business to move fast without compromising trust.

You will collaborate deeply with Engineering, SRE, Compliance, and Product teams to operationalize security across the entire lifecycle—from telemetry ingestion and threat hunting to incident response and recovery. Your impact will not only be measured by incidents prevented, but by the resilience, automation, and intelligence you embed into everything we build.

What You’ll Own & Drive

• Be the first line of defense to protect, detect, respond to, and recover from cyber-attacks in both our corporate and product environments.

• Develop and run tools to gather security telemetry data from cloud production systems.

• Automate workflows and improve identification and response time for security events.

• Build and optimize high signal detections with enriched data and orchestration.

• Define and improve processes, procedures, and technologies used for detection and response.

• Develop runbooks and incident playbooks for new and existing detections and influence our security operations roadmap.

• Lead threat hunting practices, suggest product and infrastructure signals to surface attacks and incorporate findings into security controls.

• Research attacker tactics, techniques, and procedures (TTPs) and craft detections to quickly identify and contain potential security threats.

• Respond to security events, triage, perform investigations, incident analysis, and communicate clearly and efficiently with partners.

• Participate in an on-call rotation.

• Onboard new systems and services to SIEM and SOAR and build new detection pipelines.

• Facilitate incident response processes and tabletop exercises.

The Qualities That Set You Apart

• Detection Strategist – You don’t just write alerts; you engineer high-signal detection systems that cut through noise and surface what truly matters.

• Threat Hunter by Nature – You proactively seek adversaries, understand attacker TTPs, and think like an operator—always a step ahead.

• Automation-First Builder – You instinctively eliminate manual toil, leveraging code and orchestration to accelerate response and scale security operations.

• Systems Thinker – You understand cloud-native architectures, endpoint telemetry, SIEM/SOAR pipelines, and infrastructure deeply enough to connect signals across environments.

• Calm Under Fire – In the middle of an incident, you are methodical, analytical, and decisive—bringing clarity to chaos.

• Collaborative Operator – You communicate complex security findings clearly to technical and non-technical stakeholders, aligning teams quickly during critical moments.

• Startup-Ready Owner – You thrive in ambiguity, take initiative without waiting for permission, and are energized by building programs from the ground up.

• Relentlessly Curious – You stay current on emerging threats, attacker techniques, and evolving security tooling—continuously raising the bar.

Your Background

• Experience as a security engineer, including security monitoring, detection engineering, incident response, and threat hunting in a SaaS company

• Practical understanding of common attacks, adversary tactics, techniques, and procedures (TTPs) and MITRE ATT&CK principles

• Operating systems internals and forensics experience for macOS, Windows & Linux

• Domain experience managing and working with current SIEM and SOAR platforms, DLP, email security platforms, endpoint protection platforms, secure service edge, etc.

• Experience developing tools and automation using common DevOps toolsets and programming languages

• Understanding of malware functionality and persistence mechanisms

• Ability to analyze endpoint, network, and application logs for anomalous events

• Proficiency in programming in Golang or Python

• Excellent collaborative skills

• Outstanding written and verbal communication

Why Incode?

• Mission with Meaning – Shape how billions of people prove identity—safely, simply, and ethically.

• Rocket-Ship Growth – Join at an inflection point where your strategies will compound in value for years.

• Elite Team & Backing – Work a truly global with top engineers, designers, and investors who share your ambition to dominate a category.

• Ownership & Autonomy – Operate like a founder with the resources of a unicorn.

• Global Impact – Every program you launch will reverberate across industries and continents.

Ready to ignite the future of trust?

Lead the narrative. Empower the field. Join Incode and turn innovation into unstoppable market momentum.

Aspects of our Culture:

• High performance

• Freedom & responsibility

• Context, not control

• Highly aligned, loosely coupled

• Continuous Feedback

• Promotions & Development

• Learn more about Life at Incode!

Benefits & Perks:

• Flexible Working Hours & Workplace

• Open Vacation Policy

Equal Opportunities:

Incode is an equal opportunity employer, committed to creating a diverse and inclusive work environment. We take great pride in having an inclusive, diverse, and global team, and we are always looking for talented and passionate individuals from all backgrounds and walks of life. As part of our commitment to inclusion, we ensure that reasonable accommodations are available throughout the hiring process. If you require any accommodation due to a disability or specific need, please let our Talent Acquisition team know—we’ll do our best to support you.

Applicant Data Privacy:

We will only use your personal information concerning Incode’s application, recruitment, and hiring processes.