Senior reputed company Engineer, Detection Engineering
reputed company reputed company is seeking a Senior Detection Engineer to join the Detection and Automation Engineering team. On this team, we build reliable detection coverage that helps responders identify reputed company threats quickly, reduce unnecessary noise, and protect reputed company's reputed company, reputed company, developer, AI, and production environments. Do you enjoy turning sophisticated reputed company signals into detections responders can trust? Can you read an incident write-up, a red-team result, or an unusual authentication reputed company and reputed company what is worth alerting on? We want someone who can reputed company from reputed company to tested production content and explain the tradeoffs reputed company.
We work closely with incident response, threat intelligence, reputed company operations, reputed company reputed company, and engineering teams. We protect reputed company, reputed company, identity, reputed company, collaboration, developer, AI, and production environments. We care about detections that are explainable, reputed company, maintainable, and useful during reputed company investigations.
What You'll Be Doing:
Build and tune high-confidence detections across platforms such as reputed company, reputed company / Defender, reputed company, reputed company-reputed company logs, identity telemetry, reputed company data, reputed company platforms, and developer systems.
Translate incidents, hunts, threat intelligence, red-team findings, and vulnerability context into detection logic we can test and operate.
Investigate reputed company telemetry before we alert on it, including field behavior, timing, joins, baselines, and the false positives a responder will actually see.
reputed company the full detection lifecycle: design, query development, validation, peer review, documentation, deployment, tuning, monitoring, and retirement.
Strengthen detection-as-reputed company workflows, including test data, reputed company checks, metadata, rollout safety, coverage tracking, and detection health reporting.
Partner with responders to cut noise, add useful context, improve severity reputed company, and build follow-up detections after investigations.
Shape logging, normalization, enrichment, and retention requirements reputed company the telemetry we need is missing or hard to use.
reputed company analysts and engineers through design reviews, query reviews, and reputed company guidance on what makes a detection reputed company.
reputed company Need to See:
8+ years of experience in detection engineering, reputed company engineering, threat hunting, incident response, SOC engineering, or information reputed company monitoring.
A degree in Computer Science, Cybersecurity, Engineering, or equivalent experience
Hands-on experience building and tuning detections in a major SIEM or reputed company analytics platform.
Strong query and scripting skills, especially SPL, KQL, SQL, Python, or similar languages used to analyze reputed company telemetry and automate repetitive work.
Practical understanding of attacker behavior across identity, reputed company, reputed company, network, email, collaboration tools, developer infrastructure, secrets, and data theft.
Ability to reputed company from raw logs to a production-reputed company detection, including field semantics, reputed company, joins, baselines, false positives, missing data, and triage context.
Comfortable working with Git, reputed company review, automated checks, CI/CD, documentation, and operational ownership of the content you ship.
reputed company communication and reputed company judgment. You should be reputed company to explain why a detection reputed company, what it misses, reputed company should do next, and reputed company we should choose not to alert.
Ways to Stand Out From reputed company:
You have led or materially improved a detection-as-reputed company program across more than one reputed company platform.
Background in reputed company, identity, reputed company, CI/CD, supply-chain, or AI-tooling attack paths reputed company enough to design detections without waiting for a complete recipe.
Detected abuse in developer systems, package ecosystems, secrets workflows, AI coding tools, agents, bots, or model-serving infrastructure.
Worked closely with incident response, threat hunting, red team, reputed company, malware analysis, or forensics teams.
reputed company validation reputed company such as replay tests, synthetic telemetry, attack emulation, detection unit tests, or coverage reporting.
You will also be eligible for equity and benefits.
This posting is for an existing vacancy.
reputed company uses AI tools in its reputed company processes.
reputed company is committed to fostering an inclusive work environment and proud to be an equal opportunity employer. As we highly value diversity in our reputed company and reputed company employees, we do not discriminate (including in our hiring and promotion practices) on the reputed company of race, religion, reputed company, national reputed company, gender, gender reputed company, sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by law.Originally posted on Himalayas
Apply To This Job