Senior Security Engineer – Detection & Response

This is a fully remote position, open to applicants in United States, +5 more countries.

📋 Description

• Take charge of security monitoring and detection across AWS, identity management, endpoints, SaaS, networks, and data center settings.

• Develop and sustain telemetry and logging pipelines essential for identifying security incidents.

• Continuously assess and enhance detection coverage.

• Lead security investigations and manage incident response from detection through containment, recovery, and post-mortem analysis.

• Actively hunt for threats and pinpoint gaps in visibility, controls, and detection coverage.

• Create automation to enhance detection, investigation, and response processes, utilizing AI and cutting-edge tools.

• Collaborate with IT and Engineering teams to transform security findings into preventative measures and improved system designs.

• Formulate and validate incident response playbooks while consistently enhancing response capabilities.

• Deploy and upgrade internal AI agents and security bots for monitoring, investigations, reporting, and various security operations tasks.

⛳️ Requirements

• Extensive hands-on experience in detection engineering, security engineering, incident response, threat hunting, or a related technical position.

• Profound understanding of cloud environments, particularly AWS, and the ability to monitor them for unauthorized or suspicious activities.

• Strong networking principles and comprehension of how attackers navigate through networks and systems.

• Deep understanding of attacker tactics and the capability to translate them into effective, high-signal detections.

• Experience in investigating actual security incidents and managing them through to resolution.

• Proficient scripting or programming skills, preferably in Python, with a tendency to automate repetitive tasks.

• Familiarity with security monitoring and response tools such as SIEM, EDR, SOAR, or similar solutions.

• Strong systems thinking and an intrinsic ability to ask, “how would we know if this was compromised?”

• Comfortable working independently while collaborating closely with IT and Engineering teams.

• Eager to explore emerging AI capabilities and proactive in experimenting with AI-assisted development, automation, and security workflows.

• Knowledge of AWS security telemetry including CloudTrail, GuardDuty, VPC Flow Logs, and IAM.

• Experience with detection-as-code, Sigma, Git-based detections, and automated testing.

• Familiarity with CrowdStrike, SentinelOne, Defender, or another EDR solution.

• Knowledge of network security monitoring, PCAP, NetFlow/sFlow, or firewall telemetry.

• Background in digital forensics, threat intelligence, purple teaming, or security validation.

• Experience in data center or colocation security, including OOB networks and BMC/IPMI.

• Understanding of security automation, AI-assisted development, or applying AI/LLMs to security engineering and operations.

• Experience in sectors such as energy, trading, fintech, critical infrastructure, or other high-value-target environments.

🏝️ Benefits

• Competitive salary with the potential for equity participation.

• Biannual bonus program.

• Fully funded technology to suit your requirements.

• Private health insurance coverage.

• Meal allowances for breakfast and dinner for employees based in the office.

• Benefits may vary based on location.