Senior Detection Creation Engineer

What you'll do

• Develop security detections in Scala Spark (Databricks) to identify malicious activity.
• Analyze attacker behaviors and translate them into observable patterns across telemetry data.
• Collaborate with engineering teams to develop high-fidelity, operationally sustainable detections.
• Tune and optimize detection logic based on real-world alert data to reduce false positives.
• Operationalize detections by integrating alerts into incident response workflows efficiently.
• Document detection logic and rationale for knowledge sharing within the security organization.

What we're looking for

• 5+ years experience in security detection, threat hunting, incident response, penetration testing, or red teaming.
• Strong understanding of real attacker behaviors, tactics, and techniques.
• Proficiency in at least one programming language with willingness to learn Scala.
• Experience analyzing security telemetry data for malicious activity identification.
• Hands-on experience writing detections using Apache Spark, Databricks, or similar frameworks.
• Deep technical expertise in Linux system internals, network protocols, web application security, container/Kubernetes security, or cloud infrastructure.