Detection & CorpSec Engineer

Join Quora's Security team as a Detection & Corporate Security Engineer. In this hybrid role, you'll build and maintain detection systems while also owning corporate security controls. You'll work closely with the IT team, collaborate with existing security engineers, and serve as a trusted security advisor to non-technical teams. Key responsibilities include building and maintaining a SIEM, designing and deploying canary tokens, investigating security incidents, and providing security guidance to non-engineering functions. Candidates should have 5+ years of experience in security engineering, strong Python skills, and familiarity with endpoint security tools and SIEM infrastructure.

• Construire et maintenir un SIEM pour collecter et analyser les journaux des systèmes d'entreprise et de production.
• Concevoir et déployer des mécanismes d'alerte précoce pour détecter les menaces avant qu'elles n'atteignent des actifs critiques.
• Enquêter sur les incidents de sécurité de bout en bout, y compris l'analyse des logiciels malveillants et l'évaluation de l'exfiltration.
• Experience with corporate security controls, identity management, endpoint protection, and access control enforcement
• Strong Python engineering skills with a track record of writing production code reviewed and shipped alongside software engineering teams
• 5+ years of experience in security engineering, detection engineering, or a closely related field
• Availability for meetings and impromptu communication during Quora's “coordination hours" (Mon-Fri: 9am-3pm Pacific Time)
• Experience with endpoint security tools (e.g. CrowdStrike or similar EDR platforms)
• Hands-on experience building or maintaining SIEM infrastructure and writing detection rules
• Experience conducting security incident investigations, including malware analysis, log review, and timeline reconstruction and threat modeling
• Experience with SIEM/SOAR options such as Elastic/Splunk or alternatives
• Familiarity with identity platforms such as Okta
• Strong understanding of authentication technology such as OAuth, Yubikey and Passkey
• Experience with Zero-Trust network architecture or VPN implementation
• Experience in a small security team or fast-paced startup environment
• Demonstrated use of AI coding tools to build or automate security workflows
• Familiarity with AWS and cloud-native security tooling