Security Detection Engineer

Required

• 4+ years of hands-on experience in Information Security, with a focus on detection engineering, threat detection, or security operations.
• Demonstrated experience writing and tuning detections across cloud, identity, endpoint, or application environments.
• Familiarity with detection frameworks and tooling such as YARA, SIGMA, Suricata, or similar rule-based detection methodologies.
• Strong understanding of attacker techniques across identity compromise, cloud abuse, lateral movement, and data exfiltration.
• Expertise analyzing and building detections on cloud and SaaS telemetry, including authentication events, API activity, and system logs.
• Strong scripting skills in a scripting language such as Python, Go, or PowerShell for automation and tool development.
• Ability to operate effectively in a fast-paced, high-growth environment.
• Strong analytical mindset with a systems-thinking approach to reducing noise and increasing signal fidelity.
• Experience supporting incident response investigations and participating in on-call rotations.
• Experience building detective controls for consumer-facing platforms or detecting authentication and API abuse at scale is a strong plus.
• Effective communicator who can collaborate with engineers and explain detection strategy clearly to both technical and non-technical stakeholders.
• Familiarity with applying data analysis or machine learning techniques to security detection or alert triage is a plus.