Senior Security Engineer, Detection & Response

Overview

Senior Security Engineer for Detection & Response, owning detections end to end—from writing and tuning detections to incident response and automation.

What you'll do

• Write and tune detections across endpoint, identity, SaaS, and cloud.
• Track detection quality using coverage against MITRE ATT&CK, precision, and time-to-detect.
• Own incident response activities: triage, contain, remediate, and write retrospectives.
• Build investigation automation to reduce toil.
• Define telemetry requirements for new systems before they ship.
• Conduct proactive threat hunting, turning hypotheses into detections or coverage documentation.

What you'll need

• Typically 5–8 years of experience in detection engineering, incident response, or threat hunting.
• Experience writing and tuning detections with hands-on work.
• Proficiency in at least one programming language (Python, Go, or similar).
• Comfort writing production-grade detection and automation code.
• Experience with a modern SIEM or detection pipeline (Panther, Elastic, Splunk, or similar).
• Practical incident response experience leading or playing a major role in real incident triage and closure.

Nice to have

• Experience treating detections as code with CI/CD, peer review, and staged rollout.
• Experience defining telemetry contracts before systems ship.
• Ability to critically evaluate and verify AI-assisted work.
• Familiarity with cloud-native and Kubernetes telemetry.
• Experience with fraud or financial-crime detection patterns.

Details

• Location: U.S. Remote.