Staff Information Security Engineer - Threat Detection & Response
Core
Owns end-to-end threat detection and response capabilities, driving strategy, tooling engineering, detection content, and incident response processes to safeguard the multi-cloud platform and customer data.
Role type
Staff Information Security Engineer (Threat Detection & Response)
Builds
Detection pipelines, detection-as-code frameworks, incident playbooks, and automated response mechanisms.
Domain
Cybersecurity, Cloud Security, Threat Intelligence
Deliverable
production ML models
Required skills
Threat detection architecture, SIEM engineering, MITRE ATT&CK mapping, Incident Command, Cloud security (AWS/Azure/GCP), Security automation scripting (Python/Go/Bash), Generative AI integration
Preferred skills
Splunk Enterprise Security, Generative AI for security operations
Technologies
Splunk, AWS, Azure, GCP, Python, Go, Bash, MITRE ATT&CK
Responsibilities
Design and operate cohesive detection pipelines across multi-cloud and SaaS environments; Build and tune high-fidelity detections using detection-as-code; Author incident playbooks and runbooks; Lead blameless post-incident reviews; Partner with developers and SREs to convert vulnerabilities into defensive rules; Securely integrate Generative AI tools for alert triage and automated responses.
Seniority
Staff, high-leverage IC with strategic ownership
