Senior Security Engineer, Detection & Response

Role overview

Strengthen security operations across cloud infrastructure and applications by building detection coverage, leading incident investigations, and managing vulnerabilities through remediation. The work spans SIEM/XDR operations, audit and attribution, threat hunting, and security design reviews, with a hands-on focus on turning findings into lasting fixes.

Responsibilities - Operate and improve SIEM/XDR capabilities, including log ingestion, detection rules, alert tuning, and investigation workflows. - Develop detections for suspicious activity, including possible data exfiltration using application and database telemetry. - Expand audit and identity coverage across Kubernetes, databases, SSO, and access paths, with suitable retention for compliance needs. - Investigate incidents, determine root causes, and coordinate durable corrective actions with engineering teams. - Hunt for threats across cloud and identity environments and create repeatable automated workflows. - Manage vulnerability findings from scans, dependency analysis, external reports, and bug bounty submissions through validation and remediation.

Requirements - At least six years of relevant experience, as indicated for this principal-level development role. - Hands-on ability to investigate logs and systems, validate security findings, and drive issues through resolution. - Strong practical judgment in AWS and Kubernetes environments. - Ability to partner with engineering teams on remediation while balancing security, privacy, compliance, and business needs. - Interest in using automation and AI-assisted workflows to improve triage, investigation, and threat hunting.

Benefits and work setup - Remote, full-time role. The listed gross compensation range is USD 5,000–9,500 per month, based on experience.