Senior Threat Detection Engineer
Core
Research and build detection capabilities for malicious activity across cloud, SaaS, endpoints, identity, and autonomous vehicle/IoT platforms using detection-as-code.
Role type
Senior IC security engineer (detection engineering)
Builds
High-fidelity detection rules, analytics, and automated response workflows for SIEM, EDR, and SOAR platforms
Domain
Cybersecurity, Cloud Security, AI/ML Security, IoT Security
Deliverable
production ML models | product features
Required skills
Threat research and TTP analysis, SIEM/EDR/SOAR operations, Python or Go programming, SQL for large-scale log analysis, Cloud platform expertise (AWS/Azure/GCP), Detection-as-code practices, Incident response support
Preferred skills
Experience with AI/agent frameworks, Autonomous vehicle/IoT security, Purple teaming collaboration
Technologies
Amazon EKS, Kubernetes, CloudTrail, GuardDuty, SIEM, EDR, SOAR, SQL, KQL, Security Data Lake
Responsibilities
Research attacker TTPs and translate into detection opportunities, Build and deploy detection logic via CI/CD pipelines, Tune detection rules to reduce false positives and improve coverage, Support incident triage and emergency detection creation, Document detection logic and operational runbooks
Seniority
Senior, hands-on IC
