Detection Engineer II

This is a fully remote position, open to applicants in California, +18 more states.

📋 Description

• Develop, refine, document, and sustain detection logic across various log sources, including endpoint, cloud, container, and SaaS products.

• Support cyber forensic investigations utilizing a diverse range of log sources.

• Enhance log ingestion pipelines and telemetry collection to ensure the delivery of high-quality, actionable security data while effectively managing volume and costs.

• Create and implement SOAR playbooks and automation workflows to improve detection triage, enrichment, and response processes.

• Provide mentorship and knowledge sharing with fellow detection engineers regarding threat hunting methodologies, detection logic creation, and investigative techniques.

⛳️ Requirements

• A minimum of 2 years of experience in detection engineering, incident response, or an offensive security role.

• Familiarity with one or more public cloud platforms (AWS, Azure, GCP).

• Comprehensive understanding of attacker TTPs in contemporary zero trust environments, including identity compromise, token theft, and trust boundary exploitation.

• Strong understanding of macOS internals and the telemetry available for identifying macOS-specific threats.

• Experience in implementing detection-as-code workflows that incorporate version control, peer review processes, automated testing, and CI/CD deployment pipelines.

• Basic proficiency in Python, Golang, or other programming/scripting languages.

• Relevant certifications: GCFA, GCFE, GNFA, GREM, OSCP, GCIA, or similar.

• Preferred background in offensive security or red teaming.

• Preferred knowledge of machine learning applications for threat detection.

🏝️ Benefits

• Highly competitive market compensation.

• Eligibility for a new hire equity grant.

• Annual refresh grants.

• Flexible work arrangements.