Security Engineer, Detection & Response
Core
Design, build, and maintain automation, playbooks, and systems for security triage, investigation, and incident response across cloud and application environments.
Role type
Senior IC security engineer (detection & response)
Builds
Security automation, playbooks, and high-signal detections
Domain
Cybersecurity, Cloud Security, Incident Response
Deliverable
production ML models
Required skills
Security engineering, detection engineering, incident response, EDR, SIEM, SOAR, log management, scripting/query languages, cloud infrastructure, SaaS security, risk-based judgment
Preferred skills
Self-service security triage automation, AI-assisted response, threat hunting, digital forensics, threat intelligence, infrastructure-as-code security controls, containerized/Kubernetes environments
Technologies
EDR, SIEM, SOAR, Kubernetes
Responsibilities
Design and maintain automation and playbooks for security triage and incident response; Develop and refine high-signal detections while minimizing noise; Integrate security telemetry and tooling across cloud and application environments; Lead cross-functional incident response across applications, cloud infrastructure, endpoints, identity, and internal services; Evaluate response procedures and improve the operating model; Participate in regular on-call rotation for critical security incidents
