Security Engineer (Detection Engineering)

What you'll do

• Build and improve security detection mechanisms and automation frameworks for the Security Operations Center.
• Develop tooling and data delivery mechanisms to identify threat actors in critical environments.
• Create automation workflows to reduce the time required to triage security detections.
• Develop services to ingest new datasets or enrich existing ones for better visibility.
• Identify and prioritize detection gaps by engaging with owners of high-risk systems and services.
• Investigate anomalous or suspicious behavior identified during the detection engineering process.
• Participate in adversary emulation activities to identify and address environmental security gaps.

What we're looking for

• Bachelor's degree in a STEM field or 2+ years of professional experience in incident response, security operations, or security engineering.
• Proficiency in modern programming languages such as Python, Go, C++, or Rust.
• Experience performing incident response tasks or contributing to a CSIRT team.
• Experience building ETL pipelines from diverse systems to optimize logging formats for threat detection.
• Ability to support and manage services in a Kubernetes environment with infrastructure automation.
• Knowledge of security operations environments, including SIEM systems and standard response procedures.
• Knowledge of Red Team/adversarial attack trends and the evidence sources required for investigation.
• Must be a U.S. citizen, national, lawful permanent resident, or eligible for specific export control authorizations.