Staff Detection Engineer
FluidStack — New York, New York, United States · In-Person · Staff+
Role description
Role Overview
The Staff Detection Engineer will build the detection engineering function from the ground up, including telemetry pipelines, detection content, alert routing, and response runbooks. They will own detection-as-code end to end, writing detections across cloud and endpoint sources with tests, version control, and CI. They will also lead incident response for high-severity events and drive automation of triage and enrichment in Python.
What You Will Do
The main day-to-day responsibilities of the Staff Detection Engineer will include building and maintaining detection-as-code pipelines, writing detections against cloud and endpoint telemetry, and leading incident response efforts. They will also work across corp IT and infrastructure teams to get the telemetry and fixes shipped.
Why It Might Be a Fit
The ideal candidate for this role will have 8+ years of experience in security operations, detection engineering, or incident response, with a strong background in cloud and endpoint telemetry. They will also have experience leading incident response efforts and driving automation of triage and enrichment in Python.
Requirements
- 8+ years of experience in security operations, detection engineering, or incident response
- Experience building or scaling a detection engineering function
- Deep hands-on experience writing detections against cloud telemetry (AWS, GCP, or Azure control plane and audit logs) and endpoint telemetry (EDR event streams, OS-level signals)
- Strong scripting and automation skills in Python or similar
- Incident response experience at a company operating at significant scale
- Ability to operate as a technical lead without heavy management overhead
Benefits
- Competitive salary
- Pay equity
- Transparency
- Dental insurance
- Vision insurance