Senior Security Engineer, Detection Engineering
Core
Build and tune high-confidence security detections across enterprise, cloud, identity, endpoint, and developer environments to help responders identify real threats quickly and reduce noise.
Role type
Senior IC detection engineer
Builds
Production-ready detection logic, queries, and detection-as-code workflows for SIEMs and security analytics platforms
Domain
Cybersecurity, threat detection, incident response, cloud security, identity security
Required skills
detection engineering, threat hunting, incident response, SIEM operations, query development, scripting (SPL, KQL, SQL, Python), telemetry analysis, detection lifecycle management, code review, CI/CD integration
Preferred skills
detection-as-code program leadership, cloud/identity/Kubernetes/CI/CD attack path knowledge, developer system abuse detection, attack emulation, synthetic telemetry generation, coverage reporting
Technologies
Splunk, Microsoft Sentinel, Microsoft Defender, CrowdStrike, Git, CI/CD pipelines
Responsibilities
Build and tune detections across multiple platforms; translate incidents and threat intel into detection logic; investigate telemetry to validate alerts; drive the full detection lifecycle from design to retirement; strengthen detection-as-code workflows; partner with responders to reduce noise and improve context; shape logging and retention requirements; coach analysts and engineers on detection design.
Seniority
Senior, hands-on IC
