Detection Engineer, Protective Services

Role overview This Detection Engineer role on a Protective Services team focuses on identifying and investigating threats to protected individuals at a global on-demand logistics company. The signals span enterprise telemetry, marketplace activity, physical security events, OSINT, support interactions, and other data sources, so the work connects cross-domain signals into actionable intelligence rather than living within a traditional SOC boundary.

Responsibilities - Translate threat intelligence, incidents, investigative needs, and observed behavior into production detections that surface meaningful risk and reduce noise. - Build, test, deploy, tune, and maintain detections and supporting pipelines using source-controlled engineering practices that operate reliably at scale. - Correlate signals across enterprise telemetry, marketplace activity, physical security events, OSINT, and support interactions to prioritize potential threats. - Apply rules, statistical methods, machine learning, and LLM-based techniques where they improve detection quality, prioritization, or investigative context. - Investigate detections by querying and correlating data, validating hypotheses, and assessing confidence, scope, and potential impact alongside Protective Services partners. - Follow detections through investigation and resolution, using outcomes and false positives to improve logic, tooling, and workflows. - Contribute to technical reviews, testing, documentation, standards, and automation that strengthen the detection function, including on-call participation and support for major investigations.

Requirements - 3+ years in detection engineering, threat hunting, incident response, security operations engineering, technical threat intelligence, or software engineering applied to security problems. - Experience building production detection pipelines using source control, testing, review, deployment, and monitoring practices. - Proficiency in SQL or a security query language, with the ability to write maintainable code in Python, Go, or another relevant language. - Strong analytical skills, with the ability to explore unfamiliar datasets, assess data quality, and troubleshoot across systems.

Nice to have - Experience applying machine learning or LLM-based approaches to detection quality or investigative context. - Background correlating signals across physical security, marketplace, and enterprise telemetry domains.

Benefits and work setup - Reports to the Engineering Manager, Protective Services, with participation in an on-call rotation. - Commitment to inclusive hiring and equal opportunity employment across a global, multi-office organization.