Senior Detection and Response Engineer
Core
Building detection and response capabilities from zero to one for an enterprise environment, focusing on identity systems, endpoints, SaaS applications, and internal infrastructure.
Role type
Senior IC detection and response engineer
Builds
Telemetry pipelines, detection content, alert routing, enrichment, and automated response playbooks
Domain
Cybersecurity, Enterprise Security Operations
Deliverable
production ML models
Required skills
Detection engineering, Incident response, Threat hunting, Python, SQL, SIEM, EDR, Security analytics, Infrastructure as Code (IaaC), Telemetry pipeline design
Preferred skills
Founding security hire experience, Insider threat detection, Data loss prevention, Offensive security, Incident command, Endpoint forensics, Cloud forensics
Responsibilities
Shape technical direction and roadmap for detection and response; Build end-to-end detection engineering including pipelines and alert routing; Conduct threat-informed hunts and tabletop exercises; Automate triage and response workflows; Partner with IAM, CPE, and NetEng to gather telemetry; Translate detection findings into control improvements with Enterprise Security
