Staff Engineer, Detection and Response
Core
Lead detection and response (D&R) strategy and execution for a SaaS security team, building detection systems, response automations, and investigation tools.
Role type
Staff Engineer, Detection and Response (Security)
Builds
Detection systems, response automations, investigation tools, and AI-augmented workflows.
Domain
Cybersecurity, SaaS, Cloud Security
Required skills
Detection and response strategy, detection engineering, incident response leadership, Python, Git, CI/CD, detection-as-code, cloud security architecture, SIEM management, threat hunting, AI-assisted security workflows
Preferred skills
Staff/Lead/Principal level experience at high-growth cloud/SaaS, AI-assisted triage in production, public security work or certifications (GCIA, GCIH, GCED)
Technologies
Panther, Python, GCP, Kubernetes, Docker, Terraform, Google Workspace, Okta, GitHub, Slack, Atlassian, Cloudflare, CrowdStrike, Kandji, Snowflake, Claude, Cursor, Glean
Responsibilities
Own D&R strategy and multi-quarter initiatives; design detection architecture and coverage plans; lead high-severity incidents as technical lead or commander; mentor engineers; set standards for detections-as-code and AI workflows; improve incident response readiness and metrics.
Seniority
Staff, hands-on IC with strategic influence
