Senior Security Engineer - Threat Detection

Overview

Build and operate threat detection signals, pipelines, tooling, and detection-as-code systems across cloud, endpoint, identity, email, and application telemetry.

What you'll do

• Build and improve MITRE ATT&CK-aligned detections.
• Own detection lifecycles from hypothesis through retirement.
• Advance detection-as-code workflows with testing, CI/CD, and observability.
• Build integrations for data ingestion, enrichment, and threat coverage.
• Evaluate AI-powered security capabilities and their risks.
• Convert threat intelligence into detections and retrospective scans.
• Partner with Security Operations on investigations, incidents, exercises, and detection maintenance.

What you'll need

• 6+ years in security engineering, detection engineering, or a related technology discipline.
• Strong Python and SQL skills.
• Experience analyzing large datasets to build and validate detections.
• Hands-on detection-as-code, Git workflows, automated testing, and CI/CD experience.
• Deep experience with modern SIEM platforms.
• Working knowledge of AWS, Linux, containers, and EDR.
• Ability to build systems, lead projects independently, and communicate technical concepts clearly.

Nice to have

• Experience with Airflow or Databricks.
• Applied experience with LLMs, agentic frameworks, and MCP integrations.
• Experience with behavioral analytics, anomaly detection, feature engineering, and model evaluation.
• Familiarity with risk-based alerting, ChatOps, distributed alerting, and attack simulation.
• Experience with Go, Terraform, malware analysis, digital forensics, or FedRAMP environments.

Details

• Remote role for candidates residing in the United States, excluding specified metro areas.
• Annual base salary: USD 157,675–238,500.
• Full-time position.