Summary

Yelp\'s engineering culture is driven by our core values: we\'re a cooperative team that values individual authenticity and encourages creative solutions to problems. All new engineers deploy working code within their first week, and we strive to broaden individual impact with support from managers, mentors, and teams. At the end of the day, we\'re all about helping our users, growing as engineers, and having fun in a collaborative environment.

The Security Incident Detection and Response Team at Yelp is responsible for leading all security incident response activities, actively managing and increasing detection precision, and providing advanced systems and tooling. Our team is critical to improving Yelp\'s detection and response capabilities, ensuring the continued security and integrity of our data and systems.

We\'re looking for a Security Software Engineer to join our Incident Detection and Response team and contribute to our efforts to ensure Yelp\'s cloud and corporate infrastructure, network, endpoints, and applications remain safe. This opportunity requires you to be located in the United Kingdom. We\'d love to have you apply, even if you don\'t meet every single requirement in this posting. At Yelp, we\'re looking for great people, not just those who check all the boxes.

What you\'ll do:

1. Participate in incident response as an incident commander, investigator, and/or coordinator throughout the lifecycle of a security incident.
2. Hands-on experience in Digital Forensics (MacOS, Linux, Windows), reverse engineering/malware analysis.
3. Develop automated tooling to recognize attacker TTPs (Tools, Tactics, and Procedures) and IoCs (Indicators of Compromise).
4. Design, develop, maintain, and operationalize monitoring, correlation, and alerting capabilities for Yelp\'s corporate network, infrastructure, and applications to detect suspicious or anomalous behavior.
5. Improve and enhance vulnerability detection and response capabilities.
6. Perform threat hunting, red teaming activities across business applications and infrastructure integrations.
7. Exhibit strong communication skills to enforce rigorous security standards, while upholding Yelp\'s value to play well with others.
8. Partner with diverse stakeholders to advance Yelp\'s security goals.

Significant professional experience working to secure consumer websites, mobile applications, and/or large corporate IT infrastructure.

Proficiency in reverse engineering/malware analysis, network flow analysis, and digital forensics, to collect and analyze evidence from compromised systems.

Proficiency with SOAR and SIEM platforms.

Knowledge of modern threat intel (TIP) platforms.

Experience in threat modeling, threat hunting, and/or vulnerability management.

Software development skills in Python, JavaScript, Objective-C, or similar.

Experience building custom tools and solutions to help mature monitoring, detection, and response capabilities, including automating manual processes.

Passion for ensuring secure design review and educating others in security best practices.

Benefits include a competitive salary, pension scheme, employee stock purchase plan, paid holidays, remote working reimbursement, caregiver support, private health insurance, flexible hours, regular hackathons, learning groups, wellness expenses, and team offsites.