Senior Detection Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Develop, refine, document, and sustain detection logic across endpoint, cloud, container, and SaaS log sources

• Support cyber forensic investigations utilizing a variety of log sources

• Enhance log ingestion processes and telemetry collection while supervising data volume and associated costs

• Create and establish SOAR playbooks and automation workflows for detection triage, enrichment, and response

• Guide junior security analysts and detection engineers on threat hunting, detection logic, and investigative methods

• Collaborate with teams in Engineering, Red Team, Incident Response, Fraud, and Trust & Safety

⛳️ Requirements

• Over 6 years of experience in detection engineering, incident response, or offensive security

• Familiarity with one or more public cloud platforms: AWS, Azure, or GCP

• Profound understanding of attacker TTPs in contemporary zero trust environments, including identity compromise, token theft, and exploitation of trust boundaries

• Strong knowledge of macOS internals and telemetry for detecting macOS-specific threats

• Experience in implementing detection-as-code workflows with version control, peer reviews, automated testing, and CI/CD deployment pipelines

• Basic skills in programming languages such as Python, Golang, or others

• Relevant certifications like GCFA, GCFE, GNFA, GREM, OSCP, GCIA, or similar

🏝️ Benefits

• Flex First approach allowing you to work from home, an office, or a coffee shop

• Regular in-person gatherings

• Equity grant for new hires

• Annual equity refresh grants

• Compensation and benefits that are competitive in the market based on your work location