Security Engineer (Detection & Response)

Join our Security Engineering team as a Senior Security Engineer specializing in Detection and Incident Response. In this role, you will design and implement high-precision detections, develop automation to shorten response timelines, and improve telemetry pipelines. You will also conduct digital incident investigations, perform digital forensics and malware analysis, and partner with cross-functional teams to enhance security measures.

• Design and implement high-precision detection systems across cloud services and enterprise SaaS, and develop automation to shorten response timelines.
• Conduct digital incident investigations, perform digital forensics and malware analysis, and clearly communicate the significance of security incidents.
• Collaborate cross-functionally with IT, security, and engineering teams to enhance security measures and implement maintainable guardrails.
• 5+ years of experience in Detection Engineering, Incident Response, or Security Operations, with a strong emphasis on building and shipping security tooling and automation
• Proficiency in at least one programming language (e.g., Python, Go) and comfort writing production-grade code — not just scripts
• Exposure to threat intelligence platforms and integrating intel into detection and investigation workflows
• Relevant security certifications (e.g., GCIH, GCFA, GCIA, CISSP, GDSA) are a plus
• Hands-on experience designing or improving detection pipelines, SIEM content, and alerting workflows in cloud-native environments
• Strong communication skills, with the ability to translate complex security findings into clear business impact
• Experience with cloud-native environments (e.g., AWS, GCP, Azure) and the security telemetry those environments generate
• Familiarity with digital forensics tools and malware analysis techniques
• Strong understanding of modern cyber threats, common attack techniques, and adversary TTPs
• Practical experience with SIEM, EDR, and SOAR tools, with a preference for candidates who have built integrations or extended these platforms programmatically