Senior Security Engineer - Detection & Response

Responsibilities

• Develop, test, and deploy rule-based and anomaly-based detections-as-code.
• Triage alerts, respond to cyber threats, and lead end-to-end incident response investigations.
• Conduct digital forensic investigations, including evidence collection and analysis.
• Automate and codify detection and response workflows and build security tooling.
• Maintain detection and response pipelines and underlying systems.
• Collaborate with Threat Intelligence to identify and respond to sophisticated threats.
• Develop AI-first security systems to automate detection and response operations.
• Conduct threat hunts across corporate, cloud, and product environments.
• Support data engineering workflows for security data lake and SIEM platforms.
• Participate in detection and response on-call rotations.
• Coach and mentor security engineers.

Requirements

• 5+ years of hands-on security experience in modern cloud environments.
• Experience triaging and responding to cyber threats.
• Experience with large-scale log analysis, incident response, and/or digital forensics.
• Experience with centralized security data lakes and SIEM solutions.
• Hands-on experience writing detections-as-code.
• Solid data querying skills, including SQL or Splunk.
• Familiarity with large-scale data pipelines and data engineering techniques.
• Proficiency in programming languages such as Python or Go.
• Experience with Git, GitHub, and CI/CD automations.
• Familiarity with threat actor tactics, techniques, and procedures.
• Experience participating in detection and response or incident response on-call.
• Engineering-first and AI-first approach to work.
• Strong continuous-learning orientation, communication skills, and self-management.

Benefits

• Comprehensive health, welfare, and wellbeing benefits are available based on eligibility.
• Additional total compensation may include an annual cash bonus, equity, and sign-on payments.
• The role may require up to 10% travel, coordinated in advance, for onboarding, client or partner work, team meetings, and industry events.