Senior Security Engineer, Threat Response

Asana's Security team seeks a Security Engineer for the Blue Team in the Warsaw innovation hub, focusing on detection and response with an engineering approach. The role involves leading detection, analysis, and response across cloud, SaaS, identity, endpoints, and software supply chain; investigating and remediating incidents; building detection-as-code infrastructure; optimizing security tools; conducting threat hunting and forensic analysis; collaborating with engineering teams; and developing training. The role is based in Vancouver with a hybrid schedule.

8+ years in threat detection, security operations, or incident response, including cloud, identity, and SaaS investigations. Proficient in Python (Bash, Go, or JavaScript/TypeScript a plus) for security scripting and automation. Hands-on experience with software supply chain threats (npm, PyPI), CI/CD pipelines. Familiarity with Detection as Code methodologies. Strong SIEM experience (Panther, Splunk, Elastic Security). Deep EDR knowledge (CrowdStrike, SentinelOne) with macOS expertise. Digital forensics and root-cause analysis skills. Knowledge of MITRE ATT&CK. Collaborative communication skills. Curiosity about AI tools.