This is a Fully Remote Job
About Our Client:
This organization operates in the telemetry infrastructure space, supporting IT and security teams at large enterprises, including many in the Fortune 100. It addresses the challenge of managing and analyzing telemetry data to bridge the gap between AI ambitions and infrastructure capabilities, providing customers with flexible telemetry management and analysis solutions.
About the Opportunity:
The SENIOR THREAT DETECTION ENGINEER role focuses on protecting the organization by leading detection as code efforts within the internal security team. This position involves developing and maintaining detection rules, hunting for new threats, and supporting incident response. The role is critical to improving security posture by ensuring timely threat detection and response, partnering across teams, and enhancing detection infrastructure.
Responsibilities:
Design, build, test, and tune detections as code through a GitOps workflow
Map detections to MITRE ATT&CK and identify coverage gaps
Review and decide on adoption of community and vendor detection rules
Tune and retire rules to reduce alert noise and improve quality
Plan and execute hypothesis-driven threat hunts across diverse telemetry
Use adversary emulation to generate test events for detections
Translate hunt findings into detections and documentation
Participate in incident response rotation for triage and investigation
Conduct retrospectives and update playbooks and detections
Write and maintain consistent runbooks
Support the health and maintenance of security log pipelines
Build and maintain telemetry data pipelines before SIEM ingestion
Maintain CI/CD and automation for detection deployment
Work independently and develop team processes and tools
Mentor team members through code review and documentation
Collaborate with IT, Infrastructure, Engineering, and GRC teams
Participate in stand-by, on-call, or off-hours duties
Requirements:
5+ years in security operations with focus on detection engineering, threat hunting, or incident response
Experience writing and maintaining detections as code in a modern SIEM
Strong Python skills and proficiency with Git workflows and CI/CD
Strong skills in KQL for writing detection queries
Working knowledge of MITRE ATT&CK for coverage analysis
Experience investigating incidents in cloud environments and SaaS
Hands-on experience with log pipelines and data parsing
Ability to distinguish real signals from noise and escalate appropriately
Clear technical and non-technical writing skills
Routine use of AI in engineering work with practical examples
Bonus: experience with telemetry pipeline tools, Sigma rules, adversary emulation, AI-assisted security workflows, and relevant certifications
Pay Range and Compensation Package:
The salary for this role depends on geographic location and is based on the candidate's knowledge, skills, and experience
Eligible to participate in the Corporate Bonus Program
Benefits & Perks:
Health insurance
Dental insurance
Vision insurance
Short-term disability insurance
Equal Opportunity Statement:
Our client is an equal opportunity employer. They celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, or national origin.
Note:
TalentHop is a recruitment partner of this role. Please note that all employment decisions, including candidate assessment, interviews, hiring, compensation, and employment terms, are made exclusively by the hiring employer.