How your CV stacks up
Upload your CV to see how well it fits this job role
?%
# **Security Incident Response Engineer**
## About eBay
At **eBay**, we’re changing the way the world shops and sells. Our platform empowers over **190 million** buyers and sellers across **190+ markets**. We foster an inclusive environment where **authenticity**, **bold ideas**, and **unique perspectives** are celebrated. Join a company that benefits both its customers, its people, and the planet, and shape the future of global commerce.
Let’s build communities, create opportunities, and thrive together—connecting people and evolving how **millions** buy, sell, **connect**, and share worldwide.
## About the Role
You’ll join **Core Technology (CT)**, the global team driving our **end-to-end eBay technology platform**, which powers every critical system that makes **eBay.com** function.
You’ll work with the **Computer Security Incident Response Team (CSIRT)** to lead innovative approaches in identifying and mitigating **information-security threats**. Your strategic vision, creativity, and technical expertise will help build a globally leading CSIRT—defending systems, responding to daily threats, and keeping **eBay’s critical information assets secured**.
## Core Job Functions
- **Leadership and Operations**
- Guide the **CSIRT** team in daily tasks, **cover during on-call rotations** as shift lead, and manage the ticket queue/workload.
- **Threat Response & Mitigation**
- Respond to **escalated events** from security analysts.
- Develop and execute **defensive controls** to prevent **internal/external attacks**, protect **company emails, data, commerce and web-based systems**, and counter infiltration attempts.
- **Threat Research**
- Analyze compromised systems, assess vulnerabilities, and **design countermeasures**.
- **Business Impact Reporting**
- Communicate to leadership about security incidents’ impact, including theft, destruction, data breaches, and system access denials.
- **Digital Forensics & Investigations**
- Conduct HR and legal hold investigations in a **forensically sound** manner. Collaborate with **HR and legal experts** to comply with local laws.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
- On-Call Responsibilities
- Permitted to engage in shift work, weekends, holidays, and participate in the CSIRT shift lead on-call rotation.
Requirements
Technical Proficiencies
- Incident Response – Ability to guide teams during investigations and ensure correct actions.
- Offensive Security – Hands-on experience with penetration testing, Indicators of Compromise (IOCs), exploits across the stack (e.g., OS/hardware).
- Log Analysis – Expert-level comfort with SIEM technologies to gather and analyze logs, reconstruct incidents, and hunt for threats.
- System Forensics & Memory Analysis – Understanding of acquisition tools, Wireshark/TCPDump, image analysis, and forensic first response.
- Networking Fundamentals – Deep knowledge of TCP/IP protocols (HTTPS, DNS, FTP, DHCP, ARP).
- Scripting – Technical proficiency in at least one of: Python, Perl, or similar languages.
- Risk Assessment – Ability to evaluate vulnerabilities and contextually rank associated security risks.
Certifications
- Candidates must hold at least one certification from one of the following:
- GIAC (SANS): GCED, GCIA, GCFA, GPEN, GWAPT, GCFE, GSNA, GPPA, GAWN, GWEB, GNFA, GREM, GXPN, GMON, GCIH
- ISC²: CCFP, CCSP, CISSP
- Cisco: CCNA, CCNP
- CERT: CSIH
- EC Council: CEH, ENSA, CNDA, ECSS, ECSP, ECES, CHFI, LPT, ECSA, ECIH
- Offensive Security: OSCP, OSCE, OSWP, OSEE
- EnCase: EnCE
Experience and Education
- Bachelor’s Degree in Computer Science, Engineering, IT, Cybersecurity, or related field.
- Five (5) years of professional experience in incident detection and response, malware analysis, or digital forensics.
- Three (3) years of specialized experience in one or more of:
- Security Assessment/Offensive Security
- Application Security
- Security Operations Center (SOC) / Incident Response
- Cyber Intelligence Analysis
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Benefits
We believe your work fuels a brighter future for commerce and society. eBay rewards your efforts with a comprehensive benefits package that accommodates life’s most rewarding moments – from growing families to securing your future. Our benefits include:
- Parental Leave: Support for both mothers and fathers.
- Sabbaticals: Paid time off to reflect, recharge, or pursue new horizons.
- Retirement Plans: Ensure long-term financial security.
- Wellness Support: Programs to nurture physical, mental, and emotional health.
Culture and Diversity
At eBay, diversity and inclusion are priorities—not just ideals. We celebrate the uniqueness of every individual and create an environment where everyone can thrive and feel safe. Learn more about our commitment at:
Equal Opportunity Employer: Inclusive for All
eBay is an equal opportunity employer, committed to providing fair hiring practices for all through employment opportunities that respect:
- Race, colour, religion, national origin
- Sex, sexual orientation, gender identity
- Veteran status, disability, or any other legally protected characteristic.
If you require accommodation to support your application, please contact us at talent@ebay.com. We strive to process requests promptly.
Privacy Notice | Accessibility Statement
Additional Notes:
We utilize cookies to enhance your user experience and may employ AI tools in administrative stages of recruitment decisions. Our policies around privacy and responsible AI practices are detailed in:
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location