Job Description

Responsibilities

• Build, tune, version-control, peer-review, and deploy detections across endpoint, identity, SaaS, and cloud environments.
• Measure detection coverage, precision, and time-to-detect, including coverage against MITRE ATT&CK.
• Own incident response from triage through containment, remediation, and retrospective analysis.
• Build automation to reduce investigation toil and collaborate across global time zones.
• Define telemetry requirements for new systems with infrastructure and product teams.
• Proactively threat hunt across the technology estate and turn hypotheses into detections or documented coverage.

Requirements

• Typically 5–8 years of experience in detection engineering, incident response, or threat hunting, with hands-on experience writing and tuning detections.
• Proficiency in at least one programming language, such as Python or Go, and ability to write production-grade detection and automation code.
• Experience with a modern SIEM or detection pipeline such as Panther, Elastic, or Splunk, including shipping and tuning detection logic in production.
• Practical experience leading or playing a major role in triaging and closing real security incidents.
• Experience with detections as code, CI/CD, peer review, and staged rollout is preferred.
• Experience defining telemetry contracts before systems ship, familiarity with cloud-native and Kubernetes telemetry, and experience with fraud or financial-crime detection patterns are preferred.
• Ability to critically evaluate and verify AI-assisted work through testing, source-checking, and validation is preferred.

Benefits

• San Francisco-based role with regular office work and a strong preference for local or relocating candidates.
• Relocation support is available for the right candidate.
• Follow-the-sun pager rotation so engineers are not typically paged at 3 a.m. local time.
• Access to the latest hardware and software, including frontier AI models on day one.
• Total rewards include bonus, equity, medical and dental benefits, and flexible time off.

Job Tags

Similar Jobs