Senior Threat Detection Engineer

ABOUT THE ROLE: As a Threat Detection Engineer, you'll be:

• Implementing the strategic vision for threat detection, taking ownership of the detection and response life cycle.
• Hands-on with the SIEM; from creating log parsers for in-house web apps to visualizing data Looker dashboards.
• Creating security automations and playbooks to automate mundane tasks; from data enrichment to automatically removing phishing emails from employee mailboxes. We want you to run with the anything is possible mantra.
• Continuously hunting for sophisticated threats across our infrastructure, leveraging threat intelligence and innovative detection techniques to stay ahead of attackers. You'll monitor and respond to threats across AWS, GCP, internal applications, and employee endpoints (Windows, macOS).
• Responsible for ensuring good quality detections which align with our standards and best practices
• Identifying opportunities to build or enhance internal tools that streamline threat detection processes, improve data visibility, and increase response efficiency.

WHAT WE ARE LOOKING FOR:

• Strong knowledge with one of the following: Splunk, Chronicle, Panther.
• Strong understanding of modern attack and defense techniques which apply to Cloud (AWS, GCP), SaaS (such as Google Workspace and Okta) and desktop (Windows and macOS) environments.
• Passion for passing on knowledge to fellow colleagues.
• Hands-on attitude and the ability to drive solutions to completion.
• Strong experience in security automation, from writing scripts to creating end-to-end automated workflows. Familiarity with SOAR platforms and automating threat detection and response tasks.
• Excellent spoken and written communication skills.
• Experience with writing automation and scripts; bonus points if you have a repository to show-case your work.