Security Engineer, Detection and Response

Overview

Build and improve security detections, threat hunts, and response automations protecting cloud infrastructure, crypto systems, endpoints, and networks. The role partners with Product Security on purple-team exercises while a 24x7 SOC handles first-line triage.

What you'll do

• Ship production-grade detections as code and improve signal quality.
• Run purple-team exercises to validate detections and identify blind spots.
• Execute threat hunts and convert findings into detections and documented IOCs/TTPs.
• Build investigation and triage automations using scripting or AI.
• Create and maintain incident runbooks and write-ups.
• Identify detection-stack gaps and integrate security tools.

What you'll need

• 3+ years of experience in security operations, detection engineering, offensive security testing, or related security engineering.
• Hands-on experience investigating threats across endpoints, cloud environments, and network telemetry.
• Experience using SIEM, EDR, and ticketing systems.
• Experience tuning SIEM and EDR detections to reduce false positives.
• Ability to write or adapt detection rules.
• Experience with adversary-emulation or purple-team tooling.
• Ability to script with Python or Bash.

Details

• Remote in the United States.
• Participate in an on-call rotation.