Staff Security Engineer I, Detection & Response

What you'll do

• Architect, build, and maintain scalable cloud-based security monitoring solutions across logging pipelines and SIEM ingestion.
• Develop high-signal detection strategies by translating modern adversary tradecraft and threat models into actionable roadmaps.
• Build processes and workflows to triage security alerts and manage incidents through to closure.
• Research new threat attack vectors to ensure the detection program aligns with the current landscape.
• Improve detection rule quality by defining and tracking metrics like coverage, precision, and MTTD.
• Collaborate with engineering teams to build logging pipelines that ensure infrastructure ships with secure-by-default visibility.
• Provide technical guidance, mentorship, and leadership to other engineers to improve security operations.

What we're looking for

• Master's Degree (preferred).
• 8+ years of experience in detection and response or similar security engineering roles in a cloud-first environment.
• Expert-level domain knowledge in detection engineering and security incident response.
• Experience building high-quality detections in large-scale, heterogeneous deployments like Kubernetes, containers, and multi-cloud environments.
• Proficiency in writing code using Python or Golang to design tooling, automation, and data pipelines.
• Experience with open-source or commercial solutions for logging and security event management such as SIEM, log aggregation, and SOAR.
• Familiarity with more than one cloud vendor (AWS, GCP, Azure) (preferred).