About the company
Asana's Security team keeps employees, users, and customers safe by proactively addressing threats and fostering a culture of security.
Responsibilities
- Lead detection, analysis, and response across cloud and SaaS environments, identity providers, endpoints, and the software supply chain.
- Investigate and remediate security incidents across cloud infrastructure (AWS/GCP/Azure), identity providers (e.g., Okta), and SaaS environments.
- Investigate and contain software supply chain and CI/CD incidents.
- Help build and maintain detection-as-code infrastructure (e.g., Panther), SOAR automation, and response playbooks.
- Utilize and optimize security tools such as Panther for SIEM, CrowdStrike for endpoint detection and response.
- Conduct proactive threat hunting and operationalize threat intelligence.
- Conduct forensic analysis during security incidents.
- Collaborate with engineering teams to integrate security best practices.
- Develop and deliver training to educate engineers on security operations.
Requirements
- 8+ years of experience in threat detection, security operations, or incident response.
- Proficient in Python (Bash, Go, or JavaScript/TypeScript is a plus) for security scripting and automation.
- Hands-on experience investigating software supply chain threats.
- Familiarity with "Detection as Code" methodologies.
- Strong experience with SIEM platforms (e.g., Panther, Splunk, Elastic Security).
- Deep working knowledge of EDR tools (e.g., CrowdStrike, SentinelOne) with expertise in macOS endpoint security.
- Experience performing digital forensics and root-cause analysis.
- Familiarity with MITRE ATT&CK.
Conditions
- Based in Vancouver office with an office-centric hybrid schedule (Monday, Tuesday, Thursday in office).
- Estimated base salary range CAD $200,000-$240,000.
- Equity, sales incentive pay, and benefits.