Threat Detections Engineer II

📋 Description

• Design, implement, and tune custom detections across data sources.
• Translate threat intel into high-impact detection logic.
• Partner with Threat Intelligence, Incident Response, and Automation to operationalize detections.
• Assess detection performance; reduce false positives and improve coverage.
• Support automation across the detection lifecycle: dev, validation, deployment.
• Document detection logic, data sources, and workflows for repeatability.
• Map detection coverage to MITRE ATT&CK.

🎯 Requirements

• 3-5 years in security operations or detection engineering
• Familiarity with MITRE ATT&CK and Sigma
• Hands-on with Google Chronicle, YARA, YARA-L, BigQuery
• SOAR platforms and Python scripting
• Understanding of networking, identity, endpoint telemetry
• Detection-rule languages and GitHub workflows

🎁 Benefits

• Healthcare plans
• Fertility and adoption support
• Flexible time off
• OneMedical memberships for you and dependents
• 401(k) with employer match
• Learning stipend and reimbursement programs