Security Engineer, Detection & Response

You will strengthen the ability to detect, investigate, and contain security incidents by designing and improving detection logic, analyzing security telemetry across cloud and endpoint systems, and refining investigation workflows. You will write and tune detection queries, document incidents, and build automation to speed investigations and reduce false positives.

Responsibilities

• Investigate security alerts across SIEM EDR and cloud security platforms
• Perform log analysis and coordinate containment or remediation with engineering partners
• Develop test and tune detection rules using query languages to reduce false positives
• Correlate telemetry from multiple sources to identify attack patterns and determine response actions
• Monitor emerging threats and update detection logic based on findings and threat intelligence
• Build or refine SOAR playbooks and scripts to automate investigations
• Document incidents and contribute to post-incident reviews with findings and recommendations

Requirements

• 2–4 years of experience in security operations detection engineering or incident response
• Experience analyzing logs and tuning alerts within SIEMs EDR platforms and cloud security tools
• Experience writing detections using query languages such as SQL-like or KQL
• Familiarity with threat hunting and investigation techniques across cloud and endpoint environments
• Ability to analyze security telemetry identify patterns of malicious activity and recommend improvements
• Clear written and verbal communication skills for documenting incidents and collaborating with technical teams
• Experience developing and deploying SOAR playbooks (nice to have)
• Familiarity with AWS Okta Kubernetes and Google Workspace security monitoring tools (nice to have)
• Experience writing software to support detection and response tooling (nice to have)
• Experience with agentic workflows and Generative AI optimization (nice to have)

Benefits

• bonus opportunities
• equity
• Total Rewards (varies by region)