Senior Security Engineer, Detection & Response
Core
Build and operate SIEM/XDR capabilities, design detection strategies for suspicious activity and data exfiltration, investigate security incidents, and develop automation including AI-assisted workflows.
Role type
Senior Security Engineer (Detection & Response)
Builds
SIEM/XDR capabilities, detection rules, investigation workflows, and AI-assisted security operations
Domain
Cloud security, Identity security, Compliance (PCI DSS, SOC 2)
Deliverable
production ML models
Required skills
SIEM platforms (Wazuh, Splunk, ELK), Cloud security (AWS, Kubernetes), Vulnerability management, Threat hunting, Incident response, Log analysis, Compliance (PCI DSS, SOC 2), AI tooling (Claude Code, Codex, Cursor, LLM integrations)
Preferred skills
AI-assisted triage and threat-hunting workflows, Log-based detection, Telemetry pipelines, Internal penetration testing, Adversarial exercises, Container security, IAM, Network segmentation, Regulatory compliance, Snyk, Trivy, Grype
Technologies
Wazuh, Splunk, ELK, AWS, Kubernetes, Linux, Claude Code, Codex, Cursor, Snyk, Trivy, Grype
Responsibilities
Build and operate SIEM/XDR capabilities; Design detection strategies for suspicious activity and data exfiltration; Investigate and respond to security incidents; Conduct proactive threat hunts; Manage vulnerability scanning and remediation; Triage bug-bounty findings; Develop automation including AI-assisted workflows; Participate in on-call rotation
Seniority
Senior, hands-on IC
