Detection Engineer, Protective Services
Core
Translate threat intelligence and observed behavior into production detections to reduce noise and provide actionable context for security investigations.
Role type
Senior IC detection engineer (security operations)
Builds
Production detection pipelines, rules, and supporting telemetry correlation workflows
Domain
Cybersecurity / Threat Intelligence / Protective Services
Deliverable
production ML models
Required skills
detection engineering, threat hunting, incident response, SQL, Python, Go, data correlation, hypothesis testing, alert triage, automation
Preferred skills
machine learning, LLM-based techniques, MITRE ATT&CK, D3FEND, Snowflake, Cortex, Google SecOps
Responsibilities
Build, test, deploy, tune, and maintain detections; correlate enterprise and physical security telemetry; investigate detections by querying data and validating hypotheses; improve detection logic using investigation outcomes; participate in on-call rotations and support major investigations
Seniority
Senior, hands-on IC
