Software Engineer

Description:

Yelp is looking for a Security Software Engineer to join its Incident Detection and Response Team, a core security function responsible for detecting, managing, and responding to security threats across Yelp’s infrastructure, networks, and applications. This fully remote opportunity is open to candidates across Canada and offers the chance to work with a collaborative, values-driven engineering culture.

This role goes beyond day-to-day development—it plays a pivotal part in identifying and analyzing threats, building tools to detect and prevent incidents, and ensuring Yelp’s infrastructure remains robust and secure. The team handles high-stakes situations with real impact and provides crucial leadership in incident response operations.

Key Responsibilities:

• Actively participate in all stages of security incident response as commander, investigator, or coordinator.

• Design and develop automated tools to detect attacker behaviors (TTPs) and indicators of compromise (IoCs).

• Build and manage monitoring, correlation, and alerting systems for corporate and production environments.

• Enhance Yelp’s vulnerability detection and response systems.

• Define and enforce security policies and best practices across IT, infrastructure, and third-party tools.

• Conduct threat modeling for business applications and integrations.

• Work cross-functionally with teams, demonstrating strong communication and collaboration skills to champion security goals.

Qualifications and Skills:

• Extensive hands-on experience with securing high-scale web, mobile, and IT infrastructures.

• Skilled in malware analysis, network flow analysis, digital forensics, and familiar with SOAR/SIEM platforms.

• Experience with threat intel platforms, threat modeling, and threat hunting.

• Proficient in at least one modern programming language such as Python, JavaScript, or Objective-C.

• Proven ability to build custom automation tools to improve detection and response.

• A passion for secure design and mentoring others in cybersecurity best practices.

Compensation and Benefits:

• Annual Salary: $101000 to $237000 (equivalent to approx. $8416 to $19750/month)

• May include bonus, restricted stock units (RSUs), and other performance-based rewards

• Fully remote position across all provinces in Canada