Develop, tune, and maintain detection logic across endpoint, cloud, container, and SaaS.
Assist in cyber forensic investigations across log sources.
Optimize log ingestion and telemetry for high-quality data while managing volume.
Design and build SOAR playbooks and automation for triage and response.
Mentor detection engineers on threat hunting methods and investigations.

🎯 Requirements

2+ years in detection engineering, IR, or offensive security.
Experience with AWS, Azure, or GCP.
Deep understanding of attacker TTPs across zero-trust environments.
Proficient in macOS internals and telemetry for macOS threats.
Experience with detection-as-code: VCS, peer review, tests, CI/CD.
Proficient in Python or Golang.

🎁 Benefits

Flexible work options with in-person events.
Remote-first with Flex First policy.
New hire equity grants and annual refresh grants.
Competitive compensation and benefits.

Apply on employer's website

This employer gathers applications via their own applicant tracking system.

You will be redirected to an external application form.

Share job

Meet JobCopilot: Your Personal AI Job Hunter

Automatically Apply to Engineering Jobs. Just set your preferences and Job Copilot will do the rest — finding, filtering, and applying while you focus on what matters.

Activate JobCopilot