Staff Information Security Engineer - Detection Engineering

Overview

Staff Information Security Engineer (Detection Engineering) defining and driving detection strategy and building high-signal detections across endpoint, identity, cloud, and SaaS environments.

What you'll do

• Define a detection strategy and roadmap for priority threat scenarios and emerging attacks.
• Architect, build, and operate detections using detections-as-code and telemetry modeling.
• Partner with Red and Purple Teams to validate detection effectiveness via adversary emulation/attack simulation.
• Turn hypotheses and TTPs into production detections with IR/Threat Intel/Cloud/IAM.
• Lead proactive threat hunting by designing hunt playbooks and converting findings into detections.
• Automate incident response workflows (SOAR/Logic Apps) for triage, enrichment, containment, and case orchestration.

What you'll need

• BA/BS degree in CyberSecurity, Information Security, Computer Science, or related discipline, or related practical experience.
• 5+ years in security engineering, detection engineering, or incident response.
• 2+ years technical leadership experience.
• Expertise with log analytics and detection content for SIEM/XDR/EDR and cloud provider telemetry (AWS/Azure/GCP).
• Experience building detections and automation using scripting languages (e.g., Python) and query languages (e.g., KQL/SQL).
• Experience building detections-as-code (tests, CI/CD, canary deploys, rollback) at large scale.
• Experience with attacker TTPs and frameworks (ATT&CK) and detection efficacy metrics.

Details

• Work location can be remote anywhere in the United States or hybrid in LinkedIn’s Mountain View office location.
• Role may be remote or hybrid.
• Pay range listed as $156,000 to $255,000.