Security Engineer, Detection and Response

Responsibilities

• Detection Coverage & Quality: Ship production-grade detections as code with measurable signal improvements—reducing false positives and closing gaps identified in purple team exercises.
• Validated Defenses: Run purple team exercises with other teams to confirm detection effectiveness and identify blind spots.
• Threat Hunting Program: Execute proactive hunts based on threat intelligence and convert findings into new detections and documented IOCs/TTPs.
• Operational Efficiency
• Build automations to accelerate investigation and triage; create and maintain runbooks and incident write-ups that make response consistent and repeatable across the team.
• Detection Stack
• Identify gaps and integrate best-in-class tools that increase team effectiveness and visibility across endpoints, cloud, network, and signing systems.

Languages