Senior Detection Engineer, Protective Services

Role overview A senior detection engineer is needed to build and maintain the technical detection capabilities that protect senior executives, their families, and the operations supporting them. The role sits within a specialized protective services function that blends enterprise security telemetry, marketplace activity, physical security systems, and open-source intelligence to surface threats that fall outside a traditional SOC. The work is hands-on, full-lifecycle engineering — from hypothesis through deployment — and is closely paired with active protective investigations.

Responsibilities

- Translate threat intelligence, investigative priorities, and observed behaviors into high-quality custom alerts and detections. - Design and operate detection-as-code pipelines that support reliable detection at large scale. - Apply rules, statistical methods, and machine learning or LLM-backed techniques to structured and unstructured data where they measurably improve detection and investigation. - Integrate enterprise telemetry, marketplace signals, physical security events, OSINT, and support interactions into protective use cases. - Conduct technical triage and investigations, correlating signals across sources and helping partners determine response. - Build automation and tooling that reduce repetitive investigative work and shorten time to action. - Mentor other engineers through reviews, knowledge sharing, and hands-on collaboration. - Participate in an on-call rotation and support incident response as needed.

Requirements

- Significant hands-on experience in detection engineering, security engineering, or a closely related role. - Strong programming skills for building pipelines, queries, and production-grade tooling. - Experience working with diverse telemetry sources, including endpoint, cloud, identity, and physical security systems. - Ability to operate across the full detection lifecycle: hypothesis, data validation, deployment, tuning, and retirement. - Comfort correlating signals from structured and unstructured data and assessing confidence and scope. - Track record of collaborating with cross-functional partners, including investigators and incident responders.

Nice to have

- Background applying statistical, machine learning, or LLM-based techniques to security data. - Experience supporting protective or executive-focused security programs. - Familiarity with mentoring and elevating the technical bar of other engineers.