Engineering Manager, Detection & Response

  • San Francisco, CA
  • Full-time

Company Description

We believe the economy is better when everyone has access. When everyone has room to grow. No one should be left out because the cost is too great or the technology too complex. We started with a little white credit card reader but haven’t stopped there. We’re empowering the independent electrician to send invoices, setting up the favorite food truck with a delivery option, helping the ice cream shop pay its employees, and giving the burgeoning coffee chain capital for a second, third, and fourth location. We’re here to help sellers of all sizes start, run, and grow their business—and helping them grow their business is good business for everyone.

Job Description

The Square Security team works to ensure the security of every transaction from dip to receipt and beyond. We strive to provide a secure environment that allows Square to build world-class products for both customers and employees. Our ultimate goal is to ensure that every single experience with Square is simple, secure, and safe.

The Detection and Response Engineering Team (DART) contributes to the overall mission through systems hardening, intrusion detection, and incident response. We are an engineering-focused team and prioritize our work using an attack-driven defensive approach to prioritize our preventive controls, detective controls, and response program based on real-world attacker behaviors. We automate the detection of, and response to, attack techniques, proactively hunt for threats in the environment and are responsible for incident response. Additionally, we provide subject matter expertise to infrastructure and product teams to create and enforce policies that strive to harden our assets from attacks and improve our ability to generate strong signals.

The Engineering Manager for Detection & Response is specifically responsible for helping shape our intrusion detection, incident response, and threat intelligence capabilities as well as identification, investigation, and direction of response to suspicious behavior within our infrastructure. The position requires extensive experience identifying and developing defenses against real-world threats and responding to incidents.

You will:

  • Be responsible for Square’s detection platform, signals pipeline, and response automation.

  • Develop roadmaps and strategies for mitigating, identifying, and responding to threats.

  • Manage the Detection Engineering and Computer Security Incident Response (CSIRT) functions at Square.

  • Lead the proactive security hardening of all Square assets across environments (GCP, AWS, data centers, office networks, and client fleet).

  • Be responsible for providing subject matter expertise to teams across the company, helping them make informed, risk-based decisions.

  • Develop and report on actionable metrics that help measure the effectiveness of the team and provide direction for improvement.


You have:

  • Experience as a people lead.

  • Experience as an effective career coach providing mentorship, feedback, and investing in the career growth of your teammates.

  • Developed team strategies and roadmaps and successfully executed your plans cross-functionally with other teams.

  • Multiple years of experience detecting and responding to attacks, ideally as both an engineer and as a member of an incident response team.

  • Strong written and verbal communication skills. You can participate in very technical conversations with engineers but also effectively communicate with leadership in a non-technical way.

Additional Information

At Square, our purpose is to empower – within and outside of our walls. In order to build the best tools for the businesses and customers we support all over the world, we have to start at home with a workforce as diverse and empowered as our sellers. To this end, we take great care to evaluate all employees and job applicants equally, based on merit, competence, and qualifications. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, disability status, or any other characteristic protected by law. We encourage candidates from all backgrounds to apply and always consider qualified applicants with arrest and conviction records, in accordance with the San Francisco Fair Chance Ordinance. Applicants in need of special assistance or accommodation during the interview process or in accessing our website may contact us by sending an email to assistance(at) We will treat your request as confidentially as possible. In your email, please include your name and preferred method of contact, and we will respond as soon as possible.