Staff Security Engineer Cloud Detection and Response

You will lead cross-functional initiatives that improve detection infrastructure, telemetry collection, log normalization, and detection-as-code pipelines. You will design and tune cloud, identity, endpoint, SaaS, and CI/CD detections; conduct threat hunting; respond to incidents; and mentor SOC engineers.

Responsibilities

• Lead cross-functional detection infrastructure projects
• Expand detection coverage across cloud and corporate environments
• Design, build, and tune security detections
• Embed logging and detection requirements into system designs
• Integrate threat intelligence and adversary emulation into coverage priorities
• Conduct proactive threat hunting
• Respond to cloud and enterprise security incidents
• Participate in an on-call rotation
• Mentor SOC engineers
• Contribute to detection planning

Requirements

• 10+ years of security experience
• Experience leading cross-functional security projects or programs
• Threat detection and incident response expertise
• Cloud security expertise
• Experience with SIEM or security data lake pipelines, log onboarding, normalization, and detection-as-code workflows
• EDR and SaaS security monitoring expertise
• Experience authoring and maintaining detections
• Incident management experience
• Knowledge of MITRE ATT&CK, adversarial techniques, and NIST CSF
• Ability to write testable Python code

Benefits

• Annual bonus
• Equity compensation
• Benefits