Senior Security Engineer - Threat Detection

Overview

Build and operate threat detection signals, pipelines, tooling, and detection-as-code systems for cloud, endpoint, identity, email, and application telemetry. The role covers the full detection lifecycle and collaboration with security and engineering teams.

What you'll do

• Build and improve MITRE ATT&CK-aligned detections.
• Own detection development from hypothesis through retirement.
• Advance version-controlled detection-as-code pipelines with testing and CI/CD.
• Build integrations for data ingestion, enrichment, and threat coverage.
• Evaluate AI-assisted security capabilities and their risks.
• Convert threat intelligence into detections and retrospective scans.
• Partner with Security Operations during investigations and exercises.

What you'll need

• 6+ years in security engineering, detection engineering, or a related technology discipline.
• Strong Python and SQL skills analyzing large datasets.
• Experience with detection-as-code, Git workflows, automated testing, and CI/CD.
• Deep experience with modern SIEM platforms.
• Working knowledge of AWS, Linux, containers, and EDR.
• Ability to build systems from scratch and lead projects independently.
• Ability to communicate technical concepts through documentation, RFCs, and presentations.

Nice to have

• Experience with Airflow or Databricks.
• Applied experience with LLMs, agentic frameworks, and MCP integrations.
• Experience with behavioral analytics, anomaly detection, feature engineering, and model evaluation.
• Familiarity with risk-based alerting, ChatOps, distributed alerting, and attack simulation.
• Experience with Go, Terraform, malware analysis, digital forensics, or FedRAMP environments.

Details

• Remote role for candidates residing in the United States, excluding specified metro areas.
• Annual base salary: $157,675–$238,500 USD.
• Full-time employment.