Senior Security Engineer, Detection & Mitigation

Role overview Build defensive security capabilities that help close verified exposures before a patch is available and detect attacks already in progress. The work spans deployable compensating controls, attack detection, and AI agents that propose and validate both in customer environments.

Responsibilities - Create bounded mitigations as code, such as infrastructure changes, network policies, security group rules, and web application firewall rules. - Develop detection rules for techniques along attack paths and measure their coverage and gaps. - Build agents that propose and validate mitigations and detections in real environments. - Produce evidence that controls work, including safe rollback and detection of regressions. - Partner with security, engineering, and product colleagues to connect defenses to verified exposures.

Requirements - At least six years in security engineering, including three or more years in detection, cloud security, or infrastructure as code. - Practical experience building reproducible environments and controls with Terraform or Ansible. - Ability to turn attacker behavior into useful detections using Sigma, SIEM, or EDR rule languages. - Working knowledge of AWS security, including IAM, network controls, and WAF, plus Kubernetes network policy. - Understanding of attack chains and how to target the relevant step with a mitigation. - Strong, tested Python skills and regular use of AI tools.

Nice to have - Experience in detection engineering, security operations, attack simulation, or purple teaming. - Familiarity with MITRE ATT&CK, D3FEND, agent tooling, or Kubernetes security.

Benefits and work setup - Full-time, remote role with occasional in-person collaboration. - Stock options, family health insurance, and work equipment. - Access to current AI models and agent tools; work is intended to ship on a small, senior team.