Detection Engineer, Cloud Security

What you'll do

• Develop and deliver scalable cloud threat detections to identify real-world attack activity.
• Implement detection-as-code methodologies to improve consistency and accelerate deployment across security operations.
• Design correlation logic and detection content to enhance visibility and reduce false positives on cloud platforms.
• Partner with Security Operations teams to provide actionable detections that improve response readiness.
• Validate detection effectiveness through testing and simulation to identify gaps in cloud defense capabilities.
• Translate threat intelligence into effective detection and response capabilities using the MITRE ATT&CK framework.
• Utilize SIEM platforms, KQL, and CNAPP tools to build and maintain security detection logic.

What we're looking for

• Proven experience in security engineering, detection engineering, or cloud security.
• Experience building and improving detection capabilities within AWS, Azure, or GCP environments.
• Expertise developing security detection logic using SIEM platforms like Splunk, Kusto Query Language (KQL), or CNAPP solutions.
• Experience applying detection-as-code principles including Git, code reviews, and CI/CD pipelines.
• Solid understanding of cloud threat behaviors and the MITRE ATT&CK framework.
• Excellent communication skills for documenting solutions and collaborating with cross-functional teams.
• Preferred experience with Wiz or other CNAPP technologies and Kubernetes security.
• Experience in regulated industries like payments or financial services is a plus.