Senior Threat Detection Engineer - Intelligence
Core
Translating external threat intelligence into actionable detections for cloud and SaaS environments, leading complex investigations, and partnering with engineering to drive security by design.
Role type
Senior Threat Detection & Intelligence Engineer
Builds
Custom, high-fidelity detections for cloud and SaaS environments; context-aware detection strategies
Domain
Cloud Security / Threat Intelligence / Incident Response
Deliverable
production ML models | product features | dashboards & analysis | client delivery | infrastructure
Required skills
Threat intelligence analysis, attacker TTP analysis, cloud-native security (AWS), Python scripting, SQL querying, incident response, digital forensics, Infrastructure as Code (Terraform), detection platform management
Preferred skills
Experience automating security workflows, analyzing large datasets, explaining technical risk in business terms
Technologies
Python, SQL, Terraform, AWS, cloud security telemetry, logging platforms, detection platforms
Responsibilities
Track emerging threats and attacker campaigns relevant to cloud/SaaS; design and maintain context-aware detections across cloud, identity, and application layers; lead deep investigations from first signal to root cause; act as technical lead during security incidents; analyze detection trends to improve preventative controls; partner with engineering to raise security maturity
Seniority
Senior, hands-on IC