Senior Security Engineer - Detection Engineering

Overview

Senior Security Engineer in Detection Engineering focused on designing, building, and operating high-signal threat detections as an individual contributor.

What you'll do

• Implement and tune detection content across SIEM/XDR/EDR and cloud telemetry.
• Build detections-as-code using version control, CI/CD, tests, canary rollouts, and rollback.
• Author and maintain SIGMA rules and translate SIGMA to KQL/SQL as needed.
• Integrate and operationalize multi-cloud telemetry (Azure, AWS, and GCP) and security signals (Defender XDR/Sentinel, Entra ID).
• Proactively threat hunt using playbooks and convert findings into detections.
• Build IR automation (SOAR/Logic Apps) for triage, enrichment, containment, and case workflows.

What you'll need

• 3+ years in security, detection engineering, or incident response.
• Experience building detection content and analytics for SIEM/XDR/EDR and cloud telemetry (Azure/AWS/GCP).
• Experience programming for detections/automation (e.g., Python) and query languages (e.g., KQL/SQL/SPL).
• Experience with detections-as-code (tests, CI/CD, canary/rollback) at scale.
• Experience with attacker TTPs (MITRE ATT&CK) and detection efficacy metrics.
• BA/BS degree in CyberSecurity, Information Security, Computer Science, or related technical discipline, or equivalent practical experience.

Details

• Work can be remote anywhere in the United States or hybrid in LinkedIn’s Mountain View office location.
• Location listed as Remote, United States.