Senior Security Engineer - Threat Detection

Role overview The Security organization is hiring a Senior Threat Detection Engineer to build the signals, pipelines, and tooling that power how threats are discovered. This is a hands-on engineering role owning the detection platform end to end, from data pipelines and detection content to CI/CD and AI-assisted tooling that scales what a small team can cover. The position is remote within the United States, excluding the San Francisco Bay, New York City, and Washington, D.C. metro areas.

Responsibilities - Build, deploy, and continuously improve MITRE ATT&CK-aligned detections across cloud, endpoint, identity, email, and application telemetry with clear false-positive thresholds - Own the full detection lifecycle from hypothesis and data validation through deployment, tuning, validation, and retirement - Advance the detection-as-code platform through version control, peer review, automated testing, and CI/CD - Identify emerging threat surfaces and build integrations that strengthen data ingestion, enrichment, and coverage - Evaluate AI-powered security capabilities such as secure MCP integrations, threat hunting, anomaly detection, and response automation - Convert threat intelligence into actionable detection content and retrospective scans - Partner with Security Operations during investigations, incidents, tabletop exercises, and ongoing detection maintenance

Requirements - 6+ years of experience in security engineering, detection engineering, or a closely related discipline - Strong programming and data engineering skills for building detections and pipelines at scale - Working knowledge of MITRE ATT&CK and modern attacker techniques across cloud, identity, and endpoint surfaces - Experience operating or extending a detection-as-code platform - Ability to take projects from idea through proof-of-concept to production independently

Nice to have - Experience evaluating or deploying AI-driven security tools, including their limitations and risks - Relevant certifications such as GCFA, GCTI, or equivalent

Benefits and work setup - Remote within the United States (excluding SF Bay, NYC, and Washington D.C. metro areas) - Flexible working model with in-person collaboration available where aligned with team needs