Detection Engineer, Protective Services
Core
Build detection capabilities to identify and investigate threats to protected individuals by correlating signals across identities, endpoints, cloud, marketplace activity, and physical security events.
Role type
Senior IC detection engineer (threat intelligence & security operations)
Builds
Production detection pipelines, enrichment logic, and automation for threat identification
Domain
Cybersecurity / Executive Protection / Threat Intelligence
Deliverable
production ML models | product features
Required skills
detection engineering, threat hunting, incident response, SQL, Python, Go, signal correlation, hypothesis testing, alert triage, MITRE ATT&CK frameworks
Preferred skills
machine learning, LLM-based techniques, Snowflake, Cortex, Google SecOps, OSINT, unstructured data analysis
Technologies
Python, Go, SQL, Snowflake, Cortex, Google SecOps
Responsibilities
Translate threat intelligence and investigative needs into production detections; build, test, deploy, and tune detections and supporting pipelines; correlate signals across diverse data sources to identify and prioritize threats; investigate detections by querying data and validating hypotheses; continuously improve detection logic based on investigation outcomes; participate in on-call rotation and major investigations
Seniority
Senior, hands-on IC
