Senior Detection Engineer
Core
Own detections end-to-end from hypothesis to production rule for EDR, XDR, cloud, and network data sources.
Role type
Senior IC detection engineer
Builds
Detection rules and validation pipelines for autonomous security platforms
Domain
Cybersecurity, AI-native endpoint/cloud protection
Deliverable
production ML models
Required skills
behavioral detection rule writing, log analysis, Python scripting, Git workflows, CI/CD integration, MITRE ATT&CK mapping, false-positive analysis
Preferred skills
YARA static detection, cloud/identity/SaaS log experience, threat hunting background, detection evaluation frameworks, AI coding assistant usage
Technologies
S1QL, SDL, Sigma, KQL, SPL, Python, Git, AWS, Azure, Okta, Microsoft 365
Responsibilities
Craft and package detection rules; correlate detections across sources; validate rules against telemetry; analyze and tune false positives; respond to customer escalations; review teammate PRs; stay current on emerging threats; collaborate on roadmap planning
Seniority
Senior, hands-on IC
