Senior Security Engineer, Detection Engineering
Core
Build reliable detection coverage to identify real threats quickly and reduce noise across enterprise, cloud, developer, AI, and production environments.
Role type
Senior IC detection engineer
Builds
Production-ready detection logic, queries, and alerting rules for security analytics platforms
Domain
Cybersecurity, Threat Detection, SIEM, Cloud Security
Required skills
Detection engineering, Threat hunting, Incident response, SIEM/SOAR platforms, Query languages (SPL, KQL, SQL), Python scripting, Attacker behavior analysis, Log analysis, Detection-as-code, CI/CD pipelines, Security telemetry, False positive reduction, Triage context
Preferred skills
Detection-as-code program leadership, Cloud/Identity/Kubernetes attack paths, AI-tooling abuse detection, Red team/Forensics collaboration, Validation methods (replay tests, synthetic telemetry)
Technologies
Splunk, Microsoft Sentinel, Microsoft Defender, CrowdStrike, Git, CI/CD
Responsibilities
Build and tune high-confidence detections across multiple security platforms; Translate incidents and threat intelligence into detection logic; Investigate telemetry to validate field behavior and baselines; Drive the full detection lifecycle from design to retirement; Strengthen detection-as-code workflows and quality checks; Partner with responders to reduce noise and improve severity decisions; Shape logging and retention requirements; Coach analysts and engineers on detection design.
Seniority
Senior, hands-on IC
