Remote job
Senior Security Engineer, Detection & Response
Job details
About this role
Role overview Strengthen security operations across cloud infrastructure and applications by building detection coverage, responding to incidents, and driving vulnerability remediation. This hands-on role owns important parts of the SIEM and investigation lifecycle, from log collection and alert tuning through root-cause analysis and lasting fixes. It also uses automation, including AI-assisted workflows, to make threat hunting and triage more repeatable.
Responsibilities - Operate and improve SIEM/XDR capabilities, including log ingestion, detection rules, alert tuning, and investigation workflows. - Develop detections for suspicious behavior, including potential data exfiltration, using application and database telemetry. - Expand audit and access attribution across systems such as Kubernetes, databases, and identity services, with appropriate retention. - Investigate cloud and application incidents, determine root causes, and coordinate durable remediation. - Conduct threat hunts across cloud and identity environments and build repeatable hunting workflows. - Manage vulnerability findings from scans, dependency reviews, external reports, and bug bounty submissions; validate issues and work with engineering teams on fixes. - Contribute security input to threat models and design reviews, applying sound AWS and Kubernetes judgment.
Requirements - At least six years of relevant security engineering experience, consistent with the stated compensation description. - Practical experience with detection and response, security investigations, and vulnerability management. - Strong knowledge of cloud environments and Kubernetes, with the ability to advise teams on remediation. - Ability to analyze logs and system behavior, validate findings, and follow issues through to resolution. - Clear, respectful communication and the judgment to balance security, privacy, compliance, and business needs. - Interest in using automation and AI-assisted methods to reduce repetitive security work.
Benefits and work setup The listing describes the position as full-time and remote. It gives a gross monthly compensation range of $5,000–$9,500 USD, depending on experience.