Staff Cloud Detection & Response Engineer

ID.me's senior technical authority on detecting and responding to threats in its cloud estate, a defender-first role rather than an infrastructure or SRE job. The staff engineer commands high-severity incidents across AWS or GCP infrastructure, EKS and GKE clusters and CI/CD-deployed workloads, builds automated forensics that capture disk and memory before ephemeral compute disappears, investigates container escapes and workload identity abuse, hunts using CloudTrail, flow and Kubernetes audit logs, advises platform teams on IAM and secure design, and mentors SOC and IR analysts.

ID.me wants eight or more years in security with deep incident response, hunting and forensics, three or more leading cloud IR in AWS or GCP, strong Kubernetes runtime security knowledge, Python or Go scripting, and proven incident command. Based in McLean, Virginia.