threat detection engineer
Core
Design, build, and improve high-fidelity threat detection use cases across cloud, endpoint, identity, and network telemetry while leading incident response and automation.
Role type
Threat detection engineer (security operations)
Builds
Detection pipelines, incident response playbooks, and security analytics solutions
Domain
Information security / Cybersecurity
Deliverable
production ML models
Required skills
Threat detection, incident response, cloud security, endpoint security, network telemetry analysis, EDR/IDS/IPS/SIEM expertise, Python/Go/Bash scripting, MITRE ATT&CK, threat hunting, automation, log parsing, event correlation, false-positive reduction
Preferred skills
AI-driven threat landscape knowledge, digital forensics, malware analysis
Technologies
AWS, Splunk, ELK, Sentinel, EDR, IDS/IPS, SIEM
Responsibilities
Identify and investigate security threats, design preventive controls, formulate new detection ideas based on adversary research, lead incident response and root-cause analysis, automate incident response workflows, build in-house security analytics solutions, conduct threat hunting operations, enable compliance with industry best practices
Seniority
Mid-level, hands-on IC
