Impress employers and recruiters.
Choose from hundreds of resume examples.

Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

About the Role

This critical position allows you to work at the forefront of cybersecurity technology and information technology risk, where you will detect, investigate, and respond to threats across our global environment. Collaborate with world-class teams including SOC, engineering, HR/Legal, and other security teams to reduce risk and secure eBays global marketplace.

Responsibilities

• Lead incident response across a broad range of scenarios including external intrusion, insider threats, and misuse involving endpoints, identity, cloud, Kubernetes/container layers, and network infrastructure.
• Investigate escalated issues by prioritising impact, reconstructing activity from telemetry, identifying root cause, and driving containment, eradication, and recovery.
• Build and improve detections by developing, tuning, and maintaining SIEM correlation rules and alerting logic—balancing coverage and noise to reduce false positives and improve time-to-detect.
• Threat hunt proactively to identify attacker behavior (TTPs), validate hypotheses, and surface gaps in visibility.
• Develop automation and tooling to simplify repetitive tasks like enrichment, triage, evidence collection, and response actions.
• Perform digital forensics in a forensically sound manner.
• Support People Team investigations and legal holds in partnership with People Team and eBay Legal stakeholders.
• Apply a threat-modeling approach to new systems, infrastructure, and features.
• Track adversary tradecraft and translate research into actionable countermeasures, playbooks, and detective controls.
• Communicate clearly and consistently through incident updates, reporting to collaborators, and post-incident reviews that promote measurable improvement.

Requirements

• 5+ years of experience in incident response, detection engineering, or threat hunting, which includes designing detections, carrying out investigations, and optimising operational playbooks.
• Understand modern adversary TTPs and can convert them into pragmatic detection strategies and mitigation steps.
• Comfortable in cloud and SaaS environments and can build detection approaches that apply across major cloud platforms (AWS/Azure/GCP/OCI) when possible.
• Experience working in Kubernetes/containerized environments, including creating detections from cluster telemetry and understanding common failure and attack patterns (workloads, nodes, control plane, networking).
• Can analyze lower-level infrastructure risks such as segmentation or telemetry gaps, hidden control paths, and datacenter, firmware, or BMC-related surfaces.
• Strong with network fundamentals (TCP/IP) and comfortable using tools like Wireshark/tcpdump during investigations.
• Experience with host and/or memory forensics concepts and can apply them during active incidents.
• Can write automation in Python, Bash, Perl, or similar—and enjoy “directing” tooling (including AI/agent workflows) rather than doing everything manually.
• Communicate clearly and collaborate well across teams, translating D&R needs into streamlined requirements and ensuring follow-through among technical and non-technical collaborators.
• Solid understanding of EDR, SIEM, SOAR, or related security tools.

Skills

• Python
• Bash
• Perl
• EDR
• SIEM
• SOAR
• Kubernetes
• Cloud
• SaaS
• AWS
• Azure
• GCP
• OCI
• TCP/IP
• Wireshark
• tcpdump
• Digital Forensics
• Threat Hunting
• Incident Response
• Detection Engineering

Location

• Global

Work Type

• On-call rotation
• Potential of working on nights and weekends

Experience Level

• Senior

About the Company

• eBay is a global commerce leader that connects millions of buyers and sellers around the world.
• We exist to enable economic opportunity for individuals, entrepreneurs, businesses and organizations of all sizes.

Equal Opportunity

• All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, sex, sexual orientation, gender identity, veteran status, and disability, or other legally protected status.
• If you have a need that requires accommodation, please contact us at talent@ebay.com.
• We will make every effort to respond to your request for accommodation as soon as possible.
• View our accessibility statement to learn more about eBay's commitment to ensuring digital accessibility for people with disabilities.
• We use cookies to enhance your experience and may use AI tools for administrative tasks in the hiring process.
• To learn how we handle your personal data and use AI responsibly, please visit our Talent Privacy Notice, Privacy Center, and AI Hiring Guidelines.