Senior Detection Engineer II

Responsibilities

• Develop, tune, document, and maintain detection logic across endpoint, cloud, container, and SaaS log sources.
• Assist with cyber forensic investigations across varied log sources.
• Optimize log ingestion pipelines and telemetry collection for high-quality, actionable security data while managing volume and cost.
• Design and build SOAR playbooks and automation workflows for detection triage, enrichment, and response.
• Mentor junior security analysts and detection engineers on threat hunting, detection logic, and investigation techniques.

Requirements

• 6+ years of experience in detection engineering, incident response, or offensive security.
• Experience with one or more public cloud platforms: AWS, Azure, or Google Cloud.
• Deep understanding of attacker TTPs in modern zero-trust environments, including identity compromise, token theft, and abuse of trust boundaries.
• Proficiency with macOS internals and telemetry for identifying macOS-specific threats.
• Experience implementing detection-as-code workflows with version control, peer review, automated testing, and CI/CD deployment pipelines.
• Basic proficiency with Python, Golang, or other programming languages.
• Relevant certifications such as GCFA, GCFE, GNFA, GREM, OSCP, or GCIA.

Nice-to-haves

• Background in offensive security or red teaming.
• Knowledge of machine learning for threat detection.

Compensation and Benefits

• ATS-listed salary: $192,000–$242,500 USD annually, depending on location.
• Eligible for a new-hire equity grant and annual refresh grants.
• Benefits and compensation may vary based on work location, experience, and required skills.
• Remote work with flexibility to work from home, an office, or another preferred location, alongside regular in-person events.