Senior Threat Detection Engineer
Core
Design, build, and tune security detections as code (KQL) within a GitOps workflow, conduct threat hunting across cloud and identity telemetry, and lead incident response investigations to close visibility gaps.
Role type
Senior Threat Detection Engineer (Security Operations)
Builds
Detection rules, threat hunt findings, incident response playbooks, and secure log pipelines
Domain
Cybersecurity, Cloud Security, Telemetry Infrastructure
Required skills
Detection engineering (detection as code), Threat hunting, Incident response, Python, KQL (Kusto Query Language), MITRE ATT&CK, Log pipeline management, CI/CD automation
Preferred skills
Cribl Stream, Sigma rules, Adversary emulation, AI-assisted security workflows, Security certifications (GCIH, GCDA)
Technologies
KQL, Python, Git, GitHub Actions, Cribl Stream, SIEM, AWS, GCP, Azure
Responsibilities
Design and deploy detections as code via GitOps; Hunt for threats in cloud, SaaS, and identity telemetry; Lead incident response triage and investigation; Maintain log parsing and normalization pipelines; Mentor teammates and design security processes
Seniority
Senior, hands-on IC
