Senior Security Engineer, Detection & Response

Responsibilities: Lead the DART program direction and strategy Develop end-to-end detection logic from threat modeling to deployment across logs, telemetry, host, network, and cloud Own the security data platform, SIEM ingestion pipelines, and cost/retention decisions Build unique front-of-security tooling and AI- or agent-based detections Conduct proactive threat hunts and lead incident response activities Collaborate with Engineering, Product, Fraud, Privacy and Legal Participate in on-call rotations and incident management Stay current on attacker techniques and propose new detections or responses Contribute to hiring and growth of Security/Infrastructure engineering teams Author and maintain detection docs, playbooks, and metrics

Key requirements: 5+ years in security operations, detection engineering, incident response, or threat hunting Production-grade Python and Terraform; ability to point to production-grade detections and modules Deep knowledge of ATT&CK and adversarial TTPs Experience building detections from scratch with low false positives Hands-on with SIEM/log analytics and data lake tech (OpenSearch, Elasticsearch, Clickhouse, Splunk, Datadog, AWS Athena, Azure Synapse, Databricks) Cloud-first experience with AWS, Azure, or GCP; ownership of production security infra in AWS (VPCs, IAM, networking) Experience in digital forensics, endpoint telemetry, and cloud observability Familiarity with security automation, runbooks, and alert triage workflows Strong communication and ability to own a domain with minimal oversight Autonomy, initiative, and ability to drive initiatives end-to-end Strong communication Autonomy and ownership Collaborative mindset Python Terraform SIEM and log analytics