Senior Security Engineer, Detection & Response

• Build, operate, and mature SIEM/XDR capabilities, including log ingestion, detection rules, alert tuning, and investigation workflows
• Design detection strategies for suspicious activity and data exfiltration using application and database telemetry
• Extend audit and attribution coverage across Kubernetes, databases, SSO, and access-path telemetry
• Investigate and respond to security incidents across cloud infrastructure and applications
• Perform root cause analysis and drive long-term fixes
• Conduct proactive threat hunts across cloud and identity planes
• Build repeatable agentic threat-hunting workflows
• Operate vulnerability management across infrastructure, platforms, and applications
• Triage and validate external security findings, including bug bounty reports
• Contribute to threat modeling and security design reviews
• Apply AWS and Kubernetes expertise to secure systems and advise teams on remediation
• Support security controls aligned with PCI DSS, SOC 2, and other compliance requirements
• Develop automation, including AI, for security operations, detection, and response
• Participate in the on-call rotation for detection and response and owned services
• Report to the Director of Information Security and collaborate with security platform, network, and zero-trust engineers

• 6+ years of experience in security, software, or infrastructure engineering
• Hands-on experience securing cloud-based production systems
• Experience with SIEM platforms such as Wazuh, Splunk, or ELK
• Experience designing and tuning detection rules, reducing alert noise, and improving investigation workflows
• Hands-on vulnerability management experience, including scanning, triage, validation, remediation coordination, and verification
• Strong knowledge of AWS, Linux, and Kubernetes infrastructure
• Ability to investigate issues using logs, cloud tooling, and system-level data
• Experience assessing detection and logging implications in design reviews
• Knowledge of common security vulnerabilities and mitigation strategies, including OWASP and SANS
• Working knowledge of PCI DSS and SOC 2 compliance frameworks
• Demonstrated current use of AI tooling such as Claude Code, Codex, Cursor, or custom LLM integrations

• Gross monthly compensation of $5,000–$9,500 USD, based on experience level
• AI-assisted engineering workflows
• Participation in detection and response on-call rotation
• Open-source-focused engineering environment