Staff Engineer, Security Operations
Core
Lead detection and response (D&R) strategy and hands-on engineering for a SaaS security team, building detection systems, response automations, and investigation tools.
Role type
Staff Security Engineer (Detection & Response)
Builds
Detection systems, response automations, investigation tools, and AI-augmented workflows for a global SaaS platform.
Domain
Cybersecurity, SaaS, Cloud Security
Deliverable
production ML models
Required skills
Detection engineering, Incident response, Security strategy, Python, Detection-as-code, Cloud security, SaaS security, SIEM architecture, Threat hunting, AI integration
Preferred skills
Staff/Lead/Principal level experience, AI-assisted triage, Public security work, Certifications (GCIA, GCIH, GCED)
Technologies
Panther, Python, GCP, Kubernetes, Docker, Terraform, Google Workspace, Okta, GitHub, Slack, Atlassian, Cloudflare, CrowdStrike, Kandji, Snowflake, Claude, Claude Code, Cursor, Glean
Responsibilities
Own D&R strategy and multi-quarter initiatives; Design detection architecture and observability; Lead high-severity incidents; Mentor engineers and raise hiring standards; Implement AI-augmented workflows; Improve incident response plans and metrics.
Seniority
Staff, hands-on IC with strategic influence
