Senior Security Engineer - Detection & Response
Core
Design and maintain detection rules, signatures, behavioral analytics, and threat-hunting capabilities across cloud, bare-metal, and internal infrastructure; lead technical incident response investigations and forensic analysis.
Role type
Senior Security Engineer (Detection & Response)
Builds
Detection logic, security playbooks, response automation, orchestration pipelines, and AI-powered detection workflows.
Domain
Cloud security, threat hunting, digital forensics, incident response, AI/ML security.
Deliverable
production ML models
Required skills
Python, Go, Rust, Bash, SIEM, YARA, Sigma, Falco, EDR queries, Linux system internals, container runtime security, network telemetry, AWS, GCP, forensic investigation, incident triaging.
Preferred skills
AI/ML security automation, eBPF, kernel-level telemetry, bare-metal host security tools, security tooling build-vs-buy, compliance audits (SOC 2, ISO 27001, PCI-DSS, HIPAA/HITECH, FedRAMP).
Responsibilities
Design and maintain detection rules and threat-hunting capabilities; develop detection logic and response automation; lead incident response investigations and forensic analysis; build AI-powered detection workflows; partner with engineering teams to harden systems; participate in 24/7 on-call rotation; conduct post-incident reviews and mentor engineers.
Seniority
Senior, hands-on IC
