Cyber Defense Platforms Staff Engineer
Core
Own the defense technology stack end-to-end including SIEM, SOAR, EDR, DLP, email security, and anti-phishing platforms, along with detection content, automation, and tooling.
Role type
Staff Engineer (Senior IC)
Builds
Defense platforms, detection content, security data pipelines, SOAR playbooks, and internal tooling/integrations
Domain
Cybersecurity / Security Operations
Deliverable
production ML models | product features | infrastructure
Required skills
Security engineering, SIEM/SOAR/EDR/DLP administration, software engineering (Python/Go/PowerShell), detection content lifecycle management, MITRE ATT&CK mapping, cloud security (AWS), regulated industry experience
Preferred skills
Relevant security certifications (GIAC, CISSP)
Technologies
SIEM, SOAR, EDR, DLP, AWS
Responsibilities
Own deployment and lifecycle of defense platforms; define platform roadmap; engineer security data pipelines; manage detection content lifecycle; establish detection-as-code practices; map detection coverage to MITRE ATT&CK; design SOAR playbooks; build internal tooling and APIs; set technical standards; lead cross-functional initiatives and mentor teams
Seniority
Staff, hands-on IC with strategic ownership
