26 Detection Engineer jobs in United States available for remote work from home. Apply for positions such as Detection Engineer, Detection Engineer, Staff Software Engineer - Detection Platform (GoLang) and more! Discover the best work-from-home or hybrid, full- and part-time jobs.
Trusted by 200,000+ remote workers worldwide.
Design, build, and tune high-fidelity detection content across cloud, identity, endpoint, and SaaS environments using a detection-as-code approach. Collaborate with SOC and research teams to translate threat intelligence into behavioral detection logic and optimize performance.
The Detection Engineer will design, engineer, and implement security detection initiatives, developing new detection logic for SIEM and network security platforms, often incorporating AI-driven tooling. Responsibilities also include writing and optimizing KQL queries, tuning detection sets, and maintaining version control of detection logic using Git.
You will lead the modernization of detection engines and pipelines while ensuring system reliability and performance under load. This role involves setting technical direction, writing production code, and establishing data contracts to support scalable security operations.
Develop high-fidelity ICS-focused threat detections and asset identification analytics based on cyber threat intelligence. Mentor junior engineers and collaborate with cross-functional teams to resolve detection issues and close protocol coverage gaps.
Develop, tune, and maintain high-fidelity detection logic across cloud, endpoint, and container environments. Design automated response workflows and mentor junior team members on threat hunting and forensic investigation techniques.
We watch for new "Detection Engineer" jobs and email you the matches. Free. Unsubscribe in one click.
The engineer will deliver professional services by authoring and tuning detection content, optimizing SIEM performance, and managing log ingestion. They will also partner with the SOC and detection engineering teams to ensure environments are ready for co-managed operations.
The role involves implementing security architecture and analyzing network traffic to identify and document threat patterns. You will collaborate with data scientists to develop AI-driven detections and perform threat hunting to identify attacker tactics.
Analyze EDR telemetry and log sources across endpoint, identity, network, and cloud domains to publish threat intelligence for MDR customers. Improve detection workflows through the implementation of orchestration and automation to handle high volumes of telemetry.
Develop, tune, and maintain security detections and monitoring solutions to enhance threat visibility across a large-scale environment. Collaborate with SOC analysts and threat hunters to translate intelligence into actionable detections and maintain operational documentation.
Own the day-to-day operation of the SIEM and lead the adoption of AI-augmented SOC tooling. Triage security alerts, lead incident response efforts, and build automation to reduce manual investigation toil.
The intern will analyze EDR telemetry and log sources to identify threats across endpoint, identity, and cloud domains. They will also research coverage opportunities to develop new detectors and improve engineering workflows through automation.
The Senior Threat Engineer will design and implement AI-powered detection and response capabilities to minimize attacker dwell time. Additionally, the role involves conducting continuous, automated adversary emulation to validate defensive controls and improve security posture.
The engineer will research emerging AI-era threats and develop defensive prototypes to strengthen platform security. They will collaborate with cross-functional teams to translate research findings into production-ready detection and response capabilities.
You will develop and deploy AI-powered threat detections and automated workflows to protect Snowflake's global cloud environment. This role involves collaborating with engineering teams to build data-driven security controls and improve detection quality through continuous testing and validation.
Lead projects to identify and respond to emerging security threats while managing core tooling like SIEM and orchestration platforms. Develop detection techniques for anomalous behaviors and collaborate across teams to resolve security incidents.
The Detection and Response Engineer is responsible for the engineering, tuning, and improvement of detection capabilities and incident response workflows. This role involves building automation, managing AI-enabled SOC operations, and collaborating with cross-functional teams to reduce visibility gaps.
The Threat Detection and Response Engineer will lead incident response efforts, conduct forensic investigations, and identify new detection opportunities to mitigate evolving cyber threats. They will also maintain the health of the SOC through metrics and reporting while collaborating with business partners to ensure rapid incident resolution.
We watch for new "Detection Engineer" jobs and email you the matches. Free. Unsubscribe in one click.
The engineer will develop and optimize custom detection queries and dashboards across multiple SIEM platforms to improve security posture. They will also lead hypothesis-driven threat hunts and translate findings into updated runbooks and detection logic.
Build and maintain SIEM infrastructure to detect and alert on malicious behavior across corporate and production environments. Manage corporate security controls, endpoint protection, and Zero-Trust VPN implementation while providing security advisory to non-technical teams.
You will lead the development of an AI agent that programmatically generates detection content and validates its efficacy across diverse security environments. You will partner with engineering teams to encode expert detection knowledge into the product and establish best practices for detection lifecycle management.
Lead and mentor a team of detection engineers while personally contributing to the development and review of detection rules. Manage operational cadence, threat triage, and cross-functional partnerships to ensure timely and effective detection coverage.
Lead and advance the organization's threat detection and cyber defense engineering capabilities by overseeing security automation and defensive solutions. Manage teams responsible for detection content, SOAR workflows, and threat intelligence integration to improve incident response and operational efficiency.
The manager will lead the engineering team responsible for platforms, data, analytics, and automation capabilities to identify and neutralize cyber threats. This role defines and executes the technology roadmap for scalable, resilient, and effective threat detection and response.
Lead and grow a team of engineers to build risk management features that improve the merchant experience and act as a product differentiator. Collaborate cross-functionally with product, infrastructure, and risk strategy teams to deliver high-quality technical systems and APIs.
Lead the Security Detection & Response function by managing engineers and scaling technical systems for modern security operations. Oversee incident leadership, detection strategy, and the integration of AI-native workflows for triage and investigation.
The Senior Manager will define the strategic vision and operational roadmap for the Detection & Response organization across multi-cloud environments. They will lead a global, distributed team while driving security incident response and fostering an engineering-centric culture of automation.
We watch for new "Detection Engineer" jobs and email you the matches. Free. Unsubscribe in one click.
Stop the endless job search. Our AI finds and applies to the best jobs for you.
Everything you need to know about remote work
