About Faire
Faire is a technology wholesale platform built on the belief that the future is local. Independent retailers around the globe collectively represent a multi-hundred-billion-dollar wholesale market that has historically been fragmented and offline. At Faire, we're using the power of tech, data, and machine learning to connect this thriving community of entrepreneurs across the globe. Picture your favorite boutique in town — we help them discover the best products from around the world to sell in their stores. With the right tools and insights, we believe that we can level the playing field so businesses can grow and local communities can thrive.
We’re looking for smart, resourceful and passionate people to join us as we power the shop local movement. If you believe in community, come join ours.
About this role
As our first Detection & Response engineer, you'll build that capability from the ground up focused on our enterprise environment. Looking for and monitoring threats within identity systems our employees authenticate through, the laptops they work on, the SaaS applications that run the business, our enterprise network, and the internal infrastructure behind it. You'll decide what we monitor, build the pipelines and detections that monitor it, and write the playbooks we run when something fires. This is a zero-to-one role and it will suit someone who enjoys building with a lot of autonomy.
What You'll Do
- Shape the technical direction for detection and response at Faire. Define what good looks like, build the roadmap that gets us there, and make the case for the tooling and support it needs.
- Build detection engineering for Faire's enterprise environment end to end. Telemetry pipelines, detection content, alert routing, and enrichment.
- Bring a threat-informed point of view. Track how adversaries operate against companies like ours and translate that into detections, hunts, and tabletop exercises that test whether we'd catch it.
- Own detections and data pipelines written as IaaC.
- Automate triage, enrichment, and response so alert volume can grow without a proportional increase in analyst time.
- Work with IAM, CPE, NetEng, and IT Infrastructure Engineering to get the telemetry you need.
- Partner with Enterprise Security to translate detection findings into control improvements, and hand root causes to the teams that own them with enough context that they actually get fixed.
Qualifications
- Deep hands-on experience in detection engineering, incident response, or security operations, with a track record of building capability
- Depth in corporate attack surfaces such as identity providers and SSO, endpoint and EDR telemetry, email security, SaaS logs, device management signals, and corporate network access.
- Strong proficiency in Python and query language such as SQL.
- The ability to build and maintain detection-as-code pipelines yourself rather than specify them for someone else to build.
- Practical experience with SIEM, EDR, and security analytics platforms
- Investigative depth on endpoints and in cloud and SaaS environments, so you can reconstruct what happened across an IdP, a laptop, and a SaaS admin console, and say what you know versus what you're inferring.
- Excellent written communication and a collaborative approach to influence. You'll explain to engineers why a detection matters and to leadership what an incident actually means.
- Bonus points for experience as a founding security hire, insider threat or data loss detection, an offensive security background against corporate identity and endpoint paths, incident commander experience, endpoint or cloud forensics depth, or a clear view on what belongs in a SIEM versus a data warehouse.
Salary Range
San Francisco: the pay range for this role is $174,500 to $240,000 per year.
This role will also be eligible for equity and benefits. Actual base pay will be determined based on permissible factors such as transferable skills, work experience, market demands, and primary work location. The base pay range provided is subject to change and may be modified in the future.
Hybrid Faire employees currently go into the office 3 days per week on Tuesdays, Thursdays, and a third flex day of their choosing (Monday, Wednesday, or Friday). Additionally, hybrid in-office roles will have the flexibility to work remotely up to 4 weeks per year. Specific Workplace and Information Technology positions may require onsite attendance 5 days per week as will be indicated in the job posting.
Why you’ll love working at Faire
- Move fast: You'll own meaningful problems that serve customers around the globe with the agency to move fast and see your results clearly.
- Equipped to scale: We invest in what matters, including the latest enterprise AI tools, to help you work smarter and get more out of every day.
- Best in class: Our team is full of sharp, kind, and generous colleagues who care about their craft and about helping you grow in yours.
- Real rewards. Competitive pay, equity, and comprehensive benefits designed to support your life inside and outside of work.
- Belonging: We're intentional about building an environment where every Faire employee has equal access to opportunities, growth, and success.
Faire was founded in 2017 by a team of early product and engineering leads from Square. We’re backed by some of the top investors in retail and tech including: Y Combinator, Lightspeed Venture Partners, Forerunner Ventures, Khosla Ventures, Sequoia Capital, Founders Fund, and DST Global. We have headquarters in San Francisco and Kitchener-Waterloo, and a global employee presence across offices in Toronto, London, and New York. To learn more about Faire and our customers, you can read more on our blog.
Faire provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, genetics, sexual orientation, gender identity or gender expression.
Faire is committed to providing access, equal opportunity and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. Accommodations are available throughout the recruitment process and applicants with a disability may request to be accommodated throughout the recruitment process. We will work with all applicants to accommodate their individual accessibility needs. To request reasonable accommodation, please fill out our Accommodation Request Form (https://bit.ly/faire-form)
Privacy
For information about the type of personal data Faire collects from applicants, as well as your choices regarding the data collected about you, please visit Faire’s Privacy Notice (https://www.faire.com/privacy)
Skills Required
- Deep hands-on experience in detection engineering, incident response, or security operations, with a track record of building capability
- Depth in corporate attack surfaces including identity providers and SSO, endpoint and EDR telemetry, email security, SaaS logs, device management signals, and corporate network access
- Strong proficiency in Python and a query language such as SQL
- Ability to build and maintain detection-as-code pipelines independently
- Practical experience with SIEM, EDR, and security analytics platforms
- Investigative experience across endpoints, cloud, and SaaS environments
- Excellent written communication and a collaborative approach to influence
- Experience as a founding security hire
- Experience with insider threat or data loss detection
- Offensive security background involving corporate identity and endpoint paths
- Incident commander experience
- Endpoint or cloud forensics expertise
- Clear understanding of what belongs in a SIEM versus a data warehouse
Faire Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Faire and has not been reviewed or approved by Faire.
-
Healthcare Strength — Healthcare coverage is positioned as comprehensive across medical, dental, and vision, with dental preventative care covered at 100% and disability coverage described as fully covered. Mental health support is treated as a core benefit through therapy/coaching access and tools such as Headspace.
-
Leave & Time Off Breadth — Time off is framed as generous through paid vacation, holidays, and company-wide PTO days (“Faire Fundays”), with multiple mentions of unlimited or flexible PTO language. Remote/hybrid flexibility is also repeatedly presented as a meaningful part of the overall rewards experience.
-
Parental & Family Support — Parental leave is characterized as generous, and fertility support is explicitly included in the benefits package. Family-oriented community support is reinforced through a dedicated parent ERG (“Fairents”).
Faire Insights
What We Do
Faire is an online wholesale marketplace built on the belief that the future is local — there are over 2 million independent retailers in North America and Europe doing more than $2 trillion in revenue. At Faire, we're using the power of tech, data, and machine learning to connect this thriving community of entrepreneurs across the globe. Picture your favorite boutique in town — we help them discover the best products from around the world to sell in their stores. With the right tools and insights, we believe that we can level the playing field so that small businesses everywhere can compete with these big box and e-commerce giants. By supporting the growth of independent businesses, Faire is driving positive economic impact in local communities, globally. We’re looking for smart, resourceful and passionate people to join us as we power the shop local movement.
Why Work With Us
Faire is being built for entrepreneurs, by entrepreneurs. Our customers are at the heart of every decision we make, and we are motivated by the impact we have on local economies and communities around the world. If you believe in community, come join ours.
Gallery
