Senior Security Engineer – Threat Detection

This is a fully remote position, open to applicants in United States.

📋 Description

• Develop, implement, and consistently enhance MITRE ATT&CK-aligned detections across cloud, endpoint, identity, email, and application telemetry.

• Manage the entire detection lifecycle, from hypothesis and data validation to deployment, tuning, validation, and retirement.

• Propel the detection-as-code platform forward through version control, peer reviews, automated testing, CI/CD, pipeline reliability, and observability.

• Identify new threat surfaces and create integrations for data ingestion, enrichment, and coverage across both internal and external systems.

• Assess AI-enhanced security capabilities, including secure MCP integrations, threat hunting, anomaly detection, and response automation.

• Transform threat intelligence into actionable detection and conduct retrospective scans.

• Collaborate with Security Operations during investigations, incidents, tabletop exercises, detection maintenance, and code pairing.

• Report to the Director of Threat Detection and Response and work closely with Security Operations, Application Security, Enterprise Security, and engineering teams.

⛳️ Requirements

• Over 6 years of experience in security engineering, detection engineering, or a related technology field.

• Proficient in Python and SQL.

• Experience in analyzing large datasets to construct and validate detections.

• Practical experience with detection-as-code, Git-based workflows, automated testing, and CI/CD deployment.

• Extensive knowledge of modern SIEM platforms, including data onboarding, advanced queries, dashboards, and threat intelligence enrichment.

• Familiarity with AWS, Linux, containers, and EDR.

• Capability to build systems from the ground up, lead projects independently, learn new technologies swiftly, and convey technical concepts through documentation, RFCs, and presentations.

• Experience with data orchestration platforms such as Airflow or Databricks.

• Hands-on experience with LLMs, agentic frameworks, and MCP integrations, including understanding security risks and failure modes.

• Background in behavioral analytics, anomaly detection, feature engineering, and model evaluation.

• Awareness of risk-based alerting, ChatOps, distributed alerting, and attack simulation.

• Additional experience with Go, Terraform, malware analysis, digital forensics, or FedRAMP environments.

🏝️ Benefits

• Initial RSU grant with no vesting cliff.

• Continuous refresh equity opportunities linked to performance.

• Performance-based bonus/variable pay.

• Flexible, employee-driven remote model.

• Professional development stipend.

• Comprehensive health plans.

• Parental leave plans.

• Above-market total compensation opportunities.

• Remote work support aligned with operational needs.