Build, validate, and tune detection logic based on live investigative research and emerging threats to ensure they are operationally effective. Partner with Product Engineering to integrate high-confidence detections into the Binalyze AIR platform.
Remote Detection Engineer Jobs (47)
Search = Detection Engineer
The Detection Engineer will design, engineer, and implement security detection initiatives, developing new detection logic for SIEM and network security platforms, often incorporating AI-driven tooling. Responsibilities also include writing and optimizing KQL queries, tuning detection sets, and maintaining version control of detection logic using Git.
Design and implement detection logic using a detection-as-code approach across various SIEM and EDR platforms. Collaborate with cross-functional teams to create threat-informed detections and automate rule deployment using Python and REST APIs.
The role focuses on owning the end-to-end detection and alerting program using Datadog SIEM to turn telemetry into high-signal alerts. Additionally, the engineer will serve as a primary responder for security incidents and contribute to cloud infrastructure hardening.
Develop and maintain high-fidelity detection logic and SOAR playbooks across cloud, container, and endpoint environments. Collaborate with security teams to hunt for novel attacker techniques and optimize telemetry pipelines for actionable security data.
New "Detection Engineer" jobs delivered to your inbox
We'll notify you when new positions matching this search are posted
Develop and maintain high-fidelity detection logic across cloud, container, and endpoint environments using a detection-as-code approach. Build SOAR playbooks and automate response workflows to improve analyst efficiency and reduce noise.
Analyze EDR telemetry and log sources across endpoint, identity, network, and cloud domains to publish threat intelligence for MDR customers. Improve detection workflows through the implementation of orchestration and automation to handle high volumes of telemetry.
Design and implement fraud detection and prevention controls across authentication, trading, and crypto workflows. Conduct end-to-end investigations and build analytical pipelines to identify and remediate abuse patterns.
Detection Engineer - Machine Learning (Remote, East/Central)
CrowdStrike
·
Full Time
·
1 Week Ago
CrowdStrike
Analyze malware and detection data to improve machine learning model efficacy and manage false positives. Collaborate with internal teams to resolve customer inquiries regarding threat detections and binary legitimacy.
Design and optimize high-fidelity detections and Risk-Based Alerting strategies within Splunk Enterprise Security to improve SOC effectiveness. Collaborate with incident response and cloud engineering teams to map detections to the MITRE ATT&CK framework and reduce false positives.
Manage company-wide security toolsets to detect and investigate anomalous events and malicious activities. Build automations to optimize response times and mentor the core analyst team on threat detection logic.
Design and scale detection and response capabilities across infrastructure, cloud, and endpoint environments. Build SIEM pipelines and implement AI-driven automation to reduce response times and improve alert fidelity.
Lead the development of detection and response capabilities across blockchain, cloud-native infrastructure, and AI tooling. Proactively identify emerging threats and manage security incidents to protect Circle's financial platform and customers.
Security Consultant (Detection Engineer) - Contract - Remote
SUNSHINE ENTERPRISE USA LLC
·
Full Time
·
7 Weeks Ago
SUNSHINE ENTERPRISE USA LLC
Develop, tune, and maintain security detections and monitoring solutions to enhance threat visibility across a large-scale environment. Collaborate with SOC analysts and threat hunters to translate intelligence into actionable detections and maintain operational documentation.
Security Engineer, Detection & Response - Monitoring & Triage
Block
·
Full Time
·
10 Weeks Ago
Block
Own daily security intake and lead end-to-end investigations across endpoints, cloud, and SaaS environments. Develop automated triage capabilities and detections to reduce manual toil and improve operational maturity.
Own the day-to-day operation of the SIEM and lead the adoption of AI-augmented SOC tooling. Triage security alerts, lead incident response efforts, and build automation to reduce manual investigation toil.
The Cloud Security Architect will design and implement secure hybrid architectures that enforce Zero Trust principles across cloud and on-premises environments. They will lead teams in managing SecDevOps pipelines, ensuring compliance with federal security frameworks, and automating secure workload deployments.
New "Detection Engineer" jobs delivered to your inbox
We'll notify you when new positions matching this search are posted
The intern will analyze EDR telemetry and log sources to identify threats across endpoint, identity, and cloud domains. They will also research coverage opportunities to develop new detectors and improve engineering workflows through automation.
The Threat Intelligence and Detection Engineer will provide expert consultancy services to clients, focusing on threat hunting, incident response, and digital forensics. They will also collaborate with various teams to develop and deliver capabilities while improving security monitoring solutions.
Security Response Engineer, Detection Engineering
Chainlink Labs
·
Full Time
·
28 Weeks Ago
Chainlink Labs
As a Security Response Engineer, you will lead detection engineering efforts and contribute to Threat Management's operational duties. You will design logging and alerting pipelines, build security-related tooling, and collaborate with engineering teams to improve security visibility.
Senior Security Engineer, Threat Detection and Response
Maleda Tech
·
Full Time
·
5 Days Ago
Maleda Tech
The role involves detecting, investigating, and responding to security threats across corporate and production environments. Key tasks include building automation models, performing digital forensics, and partnering with engineering teams to improve visibility and detection.
Senior/Staff/Principal AI/ML Engineer - Threat Detection Engineering
AppGate Cybersecurity, Inc.
·
Full Time
·
2 Weeks Ago
AppGate Cybersecurity, Inc.
Develop and implement a strategic vision for threat detection by building a robust automation platform and configuring SIEM systems. Lead complex incident investigations and continuously hunt for sophisticated threats across cloud and endpoint environments.
Develop and implement a strategic vision for threat detection by building a robust automation platform and managing SIEM systems. Lead complex incident investigations and continuously hunt for sophisticated threats across cloud and endpoint environments.
Build and evolve core systems to review safety detections and improve precision through intelligent triage and automation. Partner with AI/ML teams to create feedback loops that enhance model quality and reduce real-world safety risks.
Lead projects to identify and respond to emerging security threats while managing core tooling like SIEM and orchestration platforms. Develop detection techniques for anomalous behaviors and collaborate across teams to resolve security incidents.
New "Detection Engineer" jobs delivered to your inbox
We'll notify you when new positions matching this search are posted
Staff Backend Engineer (Go) - Detection & Response
SentinelOne
·
Full Time
·
7 Weeks Ago
SentinelOne
Design and develop high-volume, low-latency backend applications using Go and Java to support real-time automated hunting and detection. Collaborate with cross-functional teams to translate business requirements into scalable data architecture solutions.
Detection Automation Engineer, Bot & Fraud Detection 159 APPLICANTS
Castle
·
Full Time
·
15 Weeks Ago
Castle
Design and maintain robust, scalable detection systems to identify and mitigate bot and fraud activity. Ensure system observability and performance while balancing business trade-offs and minimizing false positives.
The engineer is responsible for the engineering, tuning, and improvement of detection and response capabilities across endpoint, network, cloud, and identity sources. This includes managing incident response, implementing AI-enabled SOC workflows, and developing security automation to reduce manual effort.
The engineer will develop and optimize custom detection queries and dashboards across multiple SIEM platforms to improve security posture. They will also lead hypothesis-driven threat hunts and translate findings into updated runbooks and detection logic.
Automatically Apply to Detection Engineer Jobs
Stop the endless job search. Our AI finds and applies to the best jobs for you.
