Staff Detection & Response Engineer

📋 Description

• Own the D&R roadmap end to end: telemetry strategy, detection engineering, alert quality
• Decide our detection architecture. What we log, where it lands, what we build in-house, and where
• Set the bar for signal quality. Kill noisy alerts, tune what stays, and make on-call sustainable
• Design and maintain detection coverage across AWS (CloudTrail, GuardDuty, VPC flow), endpoints
• Write detections as code: versioned, tested, mapped to real threats against a consumer fintech
• Build the audit logging and telemetry pipelines that give us visibility at scale, including data

🎯 Requirements

• 6+ years in security with meaningful detection engineering and incident response experience in
• You've built detections yourself: SIEM rules, or detection-as-code pipelines, and you've closed the
• Hands-on incident response experience; you've led real incidents, not just participated in them
• Strong command of Cloud Native logging and detection surfaces
• Experience with EDR at fleet scale and identity-based detection
• Fluency in at least one language for automation (Python, Go, Ruby, or similar)

🎁 Benefits

• Bonuses potential: You've stood up a detection program from scratch or near-scratch
• Detections for AI/LLM and agentic system abuse
• Insider threat and unauthorized access investigation experience
• Consumer fintech or financial services background