Security Engineer, Detection & Response

Required

• 5+ years in security engineering, security operations, detection engineering, or software engineering with a security focus.
• Hands-on production SIEM operation — onboarding log sources, writing and maintaining detection content, and triaging alerts.
• Write production-quality code for security automation and detection-as-code.
• Experience leading or substantially contributing to security incident response.
• Strong technical writing — design docs, runbooks, and post-incident reviews.
• Demonstrated judgment in prioritizing security work using a risk-based approach.
• Ability to quickly navigate large, unfamiliar codebases and reason about complex engineering systems.
• Excellent verbal communication.
• Willing to participate in an on-call rotation.
• Desirable Qualifications:
• Hands-on experience with an AI-augmented SOC platform (Prophet Security, Dropzone AI, or equivalent), or with building large language model (LLM) augmented investigation and runbook tooling.
• Experience operating in cloud environments at scale.