Lead Security Engineer Information Security

Disclaimer: Beware of Recruitment Scams - Legitimate Cvent recruiting communications will always come from an official ‘name@cvent.com’ email. We never request any payments or ask for sensitive personal or financial information via chat or social media platforms. For more information, please visit: https://www.cvent.com/en/notice-recruitment-fraud

Overview

Cvent is a leading meetings, events, and hospitality technology provider with more than 5,000+ employees and 24,000+ customers worldwide, including 60% of the Fortune 500. Founded in 1999, Cvent delivers a comprehensive event marketing and management platform for marketers and event professionals and offers software solutions to hotels, special event venues and destinations to help them grow their group/MICE and corporate travel business. Our technology brings millions of people together at events around the world. In short, we’re transforming the meetings and events industry through innovative technology that powers the human connection.

Cvents strength lies in its people, fostering a culture where everyone is encouraged to think like entrepreneurs, taking risks and making decisions confidently. We value diverse perspectives and celebrate differences, working together with colleagues and clients to build strong connections.

AI at Cvent: Leading the Future

Are you ready to shape the future of work at the intersection of human expertise and AI innovation? At Cvent, we’re committed to continuous learning and adaptation—AI isn’t just a tool for us, it’s part of our DNA. We’re looking for candidates who are eager to evolve alongside technology. If you love to experiment boldly, share your discoveries, and help define best practices for AI-augmented work, you’ll thrive here. Our team values professionals who thoughtfully integrate AI into their daily work, delivering exceptional results while relying on the human judgment and creativity that drive real innovation.

Throughout our interview process, you’ll have the chance to demonstrate how you use AI to learn, iterate, and amplify your impact. If you’re excited to be part of a team that’s leading the way in AI-powered collaboration, we’d love to meet you.

Let’s face it. Technology moves fast. In order to secure that technology, you need to be just as fast. Being

agile in security today requires a combination of development, system engineering, and investigative skills.

That’s where you come in! You are passionate about security. You are at home with incident investigation

analysis, but not afraid to dive into the engineering side of things to create or optimize solutions to make

incident response easier. You are familiar with Cyber Threat Intelligence (CTI) and threat hunting, and their

roles in incident response, monitoring, and detection. Finally, you look to be a technical leader and mentor to

other security engineers.

This position at Cvent is a technical, hands-on role that involves investigating and responding to information

security incidents, with a focus on intelligence driven incident response. The role will also include supporting

engineering efforts that facilitate incident handling. This may include work in SIEMs, SOAR platforms, EDR

solutions, and Threat Intelligence Platforms (TIPs). A prime focus of the work will be on efficient Incident

Response in dynamic cloud environments. You should also be able to adapt quickly and find creative ways to

implement solutions in a fast-paced and high-profile technology landscape. You will work with the latest

security tools, systems, and network technologies. A thirst for knowledge, a firm team-based mindset, a

curious mind, and the desire to continuously stay abreast of new developments in the dynamic security space

is a must.

Position Duties

 Conduct and manage security incident investigations for both corporate and product environments

 Perform and lead Tier 2 and 3 responsibilities in support of Security Operations and Incident

Response

 Mentor junior personnel in incident handling and investigations

 Help keep incident response plans, runbooks, and other business processes current

 Coordinate incident management functions between the Security Engineering and Operations Team,

Technology resource stakeholders, and other internal support organizations (i.e. SRE, Legal,

Networking), ensuring security is appropriately leading security incident handling

 Assist with optimizing and auditing threat detection capabilities and SIEM content development in

support of incident detection and investigation capabilities

 Identify and plan automated incident response solutions in SOAR platforms or via other AWS native

solutions

 Work with other Security and Technology personnel to ensure that Threat Intelligence is well

integrated into the Incident Response process

 Track and report on security incident investigations

 Assist with the management and operations of incident response supporting platforms as needed

 Stay abreast of emerging technologies related to Cloud Security

 Engage in proactive Threat Hunting activities

 Contribute strategically to the technological direction of the team and its programs.

Candidate Requirements

 8+ years of experience in security engineering, security operations, or security incident response

 Bachelor’s Degree in Computer Science or related degree

 Solid familiarity with scripting in support of digital forensics and incident response, including the

integration of various security tools

 Familiarity with incorporating cyber threat intelligence into incident response

 Experience investigating security incidents in AWS Cloud

 Some experience with the AWS platform and services such as Config, Security Hub, Lambda, CloudWatch, CloudTrail, S3, WAF, Guard Duty, Shield

 Ability to adapt to a hyper-growth pace and changing priorities

 Excellent problem solving and analytical skills; outstanding oral and written communication skills

 Familiarity with common classes of security tools: SIEM, DLP, WAF, NGAV, and Vulnerability Scanners

 Self-motivation and the ability to work under minimal supervision

Preferred Qualifications

 Knowledge of high traffic and other cloud-based infrastructures and how they affect security needs

(i.e. cloud infrastructure, AWS, Serverless SOA architectures) would be a plus

 Proficiency in Python or Java languages

 Proficiency with leading digital forensic tools, such as Magnet, Autopsy/the Sleuth Kit, volatility