Identity Threat Detection Engineering Specialist
Core
Develop and evolve identity threat detection capabilities using data, events, and telemetry to identify anomalous behaviors and potential threats related to identity, authentication, and access.
Role type
Identity Threat Detection Engineering Specialist
Builds
Threat detection mechanisms, automated analysis pipelines, and security telemetry quality improvements
Domain
Cybersecurity, Identity & Access Management (IAM), Threat Detection
Deliverable
production ML models
Required skills
Threat detection engineering, Identity & Access Management (IAM), Log and event analysis, Telemetry analysis, Python, SQL, SIEM tools, Automation development, Root cause analysis, Technical documentation
Preferred skills
Cross-functional collaboration, Global team collaboration, Technical communication
Technologies
Python, SQL, SIEM, Observability tools
Responsibilities
Develop and evolve threat detections for identity, authentication, and authorization; Analyze events, logs, and telemetry to identify anomalies; Develop detection mechanisms for Account Takeover, Credential Stuffing, and session abuse; Participate in security incident investigations; Collaborate with Engineering to improve telemetry quality; Develop automations for detection efficiency; Evaluate existing detections for gaps and false positives; Document attack patterns and detection hypotheses.
Seniority
Specialist I, hands-on IC
