Senior Security Engineer - Threat Intelligence & Detection Engineering (Hybrid - Seattle)

What you'll do

• Design and maintain high-fidelity detection rules in CrowdStrike NG-SIEM across multiple domains.
• Operationalize the full detection lifecycle from threat modeling to retirement.
• Build actionable intelligence products that inform detection priorities and hunting hypotheses.
• Conduct hypothesis-driven threat hunts to surface undetected adversary activity.
• Develop automation to accelerate detection deployment, alert triage, and case enrichment.

What we're looking for

• 4+ years of experience in detection engineering, threat intelligence, SOC/IR, threat hunting, or security automation
• Proficiency in writing detection logic for enterprise SIEM platforms; CrowdStrike NG-SIEM (LogScale/CQL) preferred
• Working knowledge of MITRE ATT&CK framework at the technique and sub-technique level
• Hands-on experience with EDR analysis, behavioral anomaly detection, and post-exploitation investigation
• Scripting proficiency in Python or PowerShell for automation and investigative tooling
• Experience contributing to incident response for malware incidents, identity-based attacks, or insider threats
• Strong written communication skills; ability to produce clear documentation and intelligence products