Sr. Staff Cyber Defense Engineer

Role overview Set technical direction for enterprise cyber defense across detection, incident response, threat hunting, automation, and readiness. As a senior technical authority, you will shape architecture and roadmaps, lead complex cross-functional initiatives, and guide teams through high-impact security events and defensive improvements.

Responsibilities - Shape the cyber defense roadmap around business risk, threat conditions, and security priorities. - Establish architecture principles, telemetry standards, integrations, and engineering practices across defensive platforms and data sources. - Own the detection lifecycle, including telemetry requirements, use cases, correlation logic, validation, tuning, and effectiveness measurement. - Design advanced detections, telemetry integrations, response workflows, and agent-assisted response patterns with appropriate human oversight. - Lead major initiatives and complex incident response, resolving technical dependencies and driving root-cause analysis and durable corrective actions. - Set approaches for threat hunting, adversary validation, and readiness exercises; communicate technical risk to senior leaders and mentor practitioners.

Requirements - Typically a technical bachelor’s degree and 13+ years of related experience, a master’s and 8+ years, or a PhD and 5+ years. - Record of leading complex cyber defense initiatives across organizational boundaries. - Deep experience with SIEM, SOAR, endpoint and network detection, identity and email telemetry, and cloud security in large-scale cloud, hybrid, and on-premises environments. - Strong engineering background in detection logic, automation, telemetry pipelines, APIs, or security tooling; examples include Python, PowerShell, SPL, KQL, and SQL. - Deep knowledge of threat hunting, incident response, digital forensics fundamentals, detection engineering, and adversary behavior.

Benefits and work setup - Home-office remote arrangement; hybrid work may be available for people near an assigned site. - A flexible workplace option is mentioned; details are not specified.