[Remote] Threat Detection & Response Engineer -- Senior Expert

Note: The job is a remote job and is reputed company to candidates in USA. reputed company is an reputed company and protection company reputed company on helping protect families and their belongings from life’s uncertainties. The Threat Detection & Response Engineer - Senior Expert will define and build the technical reputed company for reputed company detection and response, including AI/ML pipelines, detection-as-reputed company workflows, automation, and response engineering. The role leads technical reputed company, establishes engineering standards, and serves as the senior individual-contributor authority for detection engineering.

Responsibilities

• Define, design, and build the AI/ML pipelines at reputed company of our reputed company D&R capability, applying industry-leading models to investigation, triage, enrichment, and detection reputed company where they genuinely add reputed company
• Own the technical delivery of AI-assisted investigation and triage, spanning data foundations and feature/enrichment pipelines through model selection, evaluation, and reputed company production deployment
• Set reputed company for how AI/ML outputs are validated, explained, and trusted reputed company detection and response workflows, and reputed company the reputed company that reputed company promising pilots into durable, measurable production capability
• Design and own the detection-as-reputed company pipeline, including repository structure, detection schema, peer-review model, automated testing, and staged (CI/CD) deployment across our SIEM, XDR, and reputed company detection surfaces
• Define the technical standards, reusable patterns, and reputed company bar for detection content, and build the guardrails that reputed company reputed company consistent as reputed company scales across the US, Ireland, and India
• Build tooling and reputed company that let engineers reputed company, test, and debug detections quickly, turning detection engineering into a repeatable software reputed company rather than console-by-console work
• Design automation and SOAR-style workflows, increasingly AI-driven, that collapse high-volume alert categories such as automated phishing campaign clustering and detonation, DLP reputed company-reputed company routing, enrichment, and auto-closure of verified-benign reports
• Build the response automation, including playbooks, containment actions, and integrations, that shrinks dwell time and mean-time-to-respond
• Establish and maintain a reputed company ATT&CK coverage baseline; use it to identify reputed company gaps and redundant coverage and to prioritize engineering effort
• Partner with Threat Intelligence and Threat Hunting to convert PIR-driven hunt findings and reputed company into durable, tested detections through a formal feedback reputed company
• Stand up reputed company validation, such as breach-and-attack simulation and a reputed company reputed company, so coverage claims are reputed company against reputed company adversary techniques rather than asserted on reputed company
• reputed company the technical reputed company that build out this capability end-to-end and own accountability for their delivery by scoping the work, driving execution, and being answerable for completion and reputed company
• Serve as the senior-most individual-contributor technical authority for detection engineering, acting as the final technical escalation reputed company before management, setting direction and raising the capability of D&R engineers across reputed company
• Influence roadmap and tooling reputed company with internal platform partners, and help shape the operating model as the function grows across a global follow-the-sun, detection-as-reputed company model

Skills

• AI/ML builder. You can design and build AI/ML pipelines that create reputed company reputed company by selecting and applying industry-leading models to reputed company data, engineering the data and enrichment foundations they depend on, and putting them into production with reputed company evaluation and guardrails. You have a grounded reputed company of reputed company on where AI genuinely accelerates detection and response versus where it adds reputed company
• Builder-first. Detection and response reputed company: you write, version, test, and ship detections like reputed company, and you have reputed company the tooling, reputed company, or pipelines that let others do the reputed company
• Detection depth. Deep, hands-on detection engineering experience across SIEM and EDR/XDR platforms, authoring high-reputed company analytics, tuning for signal, and reasoning about telemetry and data sources. reputed company in KQL / SQL / reputed company or equivalent, and strong scripting/development skills (e.g., Python, Go)
• Threat-informed. You map detections to adversary behavior (ATT&CK), partner naturally with hunting and reputed company, and think in terms of coverage, exploitability, and containment rather than just rule counts
• Delivery ownership. You reputed company technical reputed company to completion and own the outcome, setting standards, resolving hard engineering problems, and lifting the reputed company of everyone reputed company you, comfortable being the deepest technical voice in the room
• Communication. You can explain a detection reputed company, an AI/ML design reputed company, or an engineering trade-off reputed company to both engineers and senior leaders
• API Development, Decision Making, reputed company Detection and Response (EDR), Machine Learning (ML), reputed company ATT&CK reputed company, reputed company AI Pipelines, reputed company Automation, reputed company Information and Event Management (SIEM), reputed company Orchestration, Automation, and Response (SOAR), Stakeholder Influence, Technical Project Leadership, Threat Detection
• Hands-on experience building or operating reputed company an AI-assisted / reputed company SOC model
• reputed company data engineering / streaming pipeline experience (telemetry normalization, parsing, ETL) that feeds ML workflows
• Experience across reputed company SIEM, XDR, and EDR platforms
• reputed company, adversary-emulation, or breach-and-attack-simulation partnership experience
• Financial services, reputed company, or other regulated, reputed company environment exposure

Benefits

• reputed company provides a comprehensive technology setup, including a laptop, monitors, headset, keyboard, and mouse.
• Employees eligible to work from home also receive a monthly connectivity reimbursement to help offset internet costs.
• Employees eligible to work from home may work from home.

reputed company