Detection Engineer

High-growth consumer health technology company seeks Detection Engineer to lead detection engineering across cloud, identity, endpoint, and application environments. Must have 4+ years in Information Security with a focus on detection engineering, threat detection, or security operations.

Requirements

• Design and build high-signal detections across cloud, identity, endpoint, network, and application layers using Detection-as-Code principles
• Develop detection logic aligned to real-world attacker techniques using frameworks like MITRE ATT&CK
• Translate threat intelligence into actionable detections; validate through adversary emulation and testing
• Build behavioral detections targeting account takeover, credential abuse, API misuse, privilege escalation, and data exfiltration
• Continuously tune alerts, reduce false positives, and implement automated enrichment and triage
• Define and track detection KPIs (precision, recall, false positive rate, MTTD) and drive detection health improvements
• Support and lead incident investigations including containment, root cause analysis, and post-incident detection improvements
• Participate in on-call rotation; proactively reduce operational overhead through automation
• Partner cross-functionally with Engineering, IT, Infrastructure, Product, and GRC to ensure strong monitoring coverage at product launch
• Map detections to threat models, identify visibility gaps, and evolve coverage as the environment scales
• Apply advanced analytics and ML techniques to improve detection fidelity and streamline triage workflows
• Stay current on emerging attack techniques and feed learnings back into detection strategy

Benefits

• 4 days in office