Cyber Threat Detection & Response Engineer

{
  "content_hash": "05f3c59c42e1c49d775f6fc070e47092f635933ee13c1a884b4137cd78192ddd",
  "source_hash": "94133032140a296de4600eb1d569aabdf1773fccd3179eafbf738c6acb445c08",
  "last_changed_at": "2026-06-17T07:56:43.101Z",
  "active_status": "deleted"
}

{
  "language": "en",
  "location": {
    "raw": "Remote",
    "city": null,
    "region": null,
    "country": "United States",
    "is_remote": true,
    "confidence": 0.9
  },
  "salary_max": 120000,
  "salary_min": 100000,
  "inferred_at": "2026-06-15T07:56:38.064Z",
  "launch_scope": {
    "reason": "english_us_canada",
    "included": true,
    "language": "en",
    "location": {
      "raw": "Remote",
      "city": null,
      "region": null,
      "country": "United States",
      "is_remote": true,
      "confidence": 0.9
    },
    "countries": [
      "United States"
    ]
  },
  "remote_policy": "remote",
  "salary_period": "year",
  "workplace_type": "remote",
  "salary_currency": "USD"
}

{}

{
  "lists": [
    {
      "text": "What You'll Do:",
      "content": "<div>\n<ul style=\"margin-top: 0in; margin-bottom: 0in;\">\n<li style=\"margin: 0in 0in 0in 0px; line-height: normal; font-size: 12pt; font-family: Aptos, sans-serif;\">\n<p>Proactively hunt for hidden threats across endpoints, networks, cloud, and applications.<span style=\"font-family: 'MS Gothic';\">
</span></p>\n</li>\n<li style=\"margin: 0in 0in 0in 0px; line-height: normal; font-size: 12pt; font-family: Aptos, sans-serif;\">\n<p>Proactively create detection rules to alert SOC analysts of intrusions against customer networks.</p>\n</li>\n<li style=\"margin: 0in 0in 0in 0px; line-height: normal; font-size: 12pt; font-family: Aptos, sans-serif;\">\n<p>Assist with tuning and enhancing existing detection rules to better defend against evolving threats.</p>\n</li>\n<li style=\"margin: 0in 0in 0in 0px; line-height: normal; font-size: 12pt; font-family: Aptos, sans-serif;\">\n<p>Develop and execute hypotheses-driven threat hunting campaigns using security data and intelligence.<span style=\"font-family: 'MS Gothic';\">
</span></p>\n</li>\n<li style=\"margin: 0in 0in 0in 0px; line-height: normal; font-size: 12pt; font-family: Aptos, sans-serif;\">\n<p>Analyze large volumes of log, endpoint, and network data to uncover anomalous or malicious activity.<span style=\"font-family: 'MS Gothic';\">
</span></p>\n</li>\n<li style=\"margin: 0in 0in 0in 0px; line-height: normal; font-size: 12pt; font-family: Aptos, sans-serif;\">\n<p>Research and track adversary TTPs and leverage frameworks such as MITRE ATT&amp;CK.</p>\n</li>\n<li style=\"margin: 0in 0in 0in 0px; line-height: normal; font-size: 12pt; font-family: Aptos, sans-serif;\">\n<p>Collaborate with Detection Engineering to refine detection rules, signatures, and playbooks to improve threat detection.<span style=\"font-family: 'MS Gothic';\">
</span></p>\n</li>\n<li style=\"margin: 0in 0in 0in 0px; line-height: normal; font-size: 12pt; font-family: Aptos, sans-serif;\">\n<p>Collaborate with Incident Response and SOC teams to investigate and contain security incidents.<span style=\"font-family: 'MS Gothic';\">
</span></p>\n</li>\n<li style=\"margin: 0in 0in 0in 0px; line-height: normal; font-size: 12pt; font-family: Aptos, sans-serif;\">\n<p>Provide technical mentorship to junior threat hunters and SOC analysts.<span style=\"font-family: 'MS Gothic';\">
</span>Partner with Threat Intelligence to operationalize indicators and adversary insights.</p>\n</li>\n<li style=\"margin: 0in 0in 0in 0px; line-height: normal; font-size: 12pt; font-family: Aptos, sans-serif;\">\n<p>Contribute to continuous improvement of detection engineering and hunting methodologies.</p>\n</li>\n<li style=\"margin: 0in 0in 0in 0px; line-height: normal; font-size: 12pt; font-family: Aptos, sans-serif;\">\n<p>Regularly engage with internal account teams and customers to help strengthen their security posture, identify weaknesses, report on findings, and report on detection strategies.</p>\n</li>\n<li style=\"margin: 0in 0in 0in 0px; line-height: normal; font-size: 12pt; font-family: Aptos, sans-serif;\">\n<p>Provide technical insight to internal account teams and customers as needed.</p>\n</li>\n\n</ul></div>"
    },
    {
      "text": "What You've Done:",
      "content": "<ul style=\"margin-top: 0in; margin-bottom: 0in;\">\n<li>\n<p>U.S. citizenship is required</p>\n</li>\n<li>\n<p>4+ years of experience in cybersecurity, with at least 2 years focused on threat hunting or detection engineering.</p>\n</li>\n<li>\n<p>History of independently building custom behavior-based and/or threshold-based detections in customer environments from scratch.</p>\n</li>\n<li>\n<p>Experience building detections in SentinelOne, Elastic, or CrowdStrike platforms.</p>\n</li>\n<li>\n<p>Capable of independently identifying and tuning flaws in existing detections to reduce noise.</p>\n</li>\n<li>\n<p>Experience independently building and performing hypothesis-driven threat hunts in customer environments.</p>\n</li>\n<li>\n<p>Capable of clearly and concisely reporting findings from threat hunts.</p>\n</li>\n<li>\n<p>History of meeting with customers to explain detections and threat hunt findings to senior leadership teams.</p>\n</li>\n<li>\n<p>Experience working with and mapping detections to the MITRE ATT&amp;CK framework.</p>\n</li>\n<li>\n<p>Background knowledge in the cyber threat landscape, including threat actors, malware, and evolving TTPs.</p>\n</li>\n<li>\n<p>Experience working with cyber threat intelligence analysts/teams to identify new detection opportunities.</p>\n</li>\n<li>\n<p>Proficiency with SIEMs, EDR/XDR platforms, and log analysis tools.</p>\n</li>\n<li>\n<p>Experience with scripting languages (Python, PowerShell, etc.) for scripting purposes.</p>\n</li>\n<li>\n<p>Enjoy working in a team environment.</p>\n</li>\n<li>\n<p>Willingness to learn from more senior team members while mentoring junior team members.</p>\n</li>\n</ul>"
    },
    {
      "text": "Preferred Qualifications:",
      "content": "<div>\n\n<li>Experience with pentesting or red teaming.</li>\n<li>Experience with reverse engineering.</li>\n<li>GIAC Threat Hunting (GCTH), Certified Enterprise Defender (GCED), or Certified Intrusion Analyst (GCIA) certification(s)</li>\n\n</div>"
    },
    {
      "text": "What We Offer:",
      "content": "<div>\n\n<li>401(k), including an employer match of 100% of the first 3% contributed and 50% of the next 2% contributed&nbsp;&nbsp;</li>\n<li>Medical, Dental, and Vision Insurance (available on the 1st day of the month following your first day of employment)&nbsp;&nbsp;</li>\n<li>Group Term Life, Short-Term Disability, Long-Term Disability&nbsp;&nbsp;</li>\n<li>Voluntary Life, Hospital Indemnity, Accident, and/or Critical Illness&nbsp;&nbsp;</li>\n<li>Participation in the Discretionary Time Off (DTO) Program&nbsp;&nbsp;</li>\n<li>11 Paid Holidays Annually&nbsp;</li>\n\n</div>"
    }
  ],
  "country": "US",
  "createdAt": 1775681675512,
  "updatedAt": null,
  "categories": {
    "team": "MDR",
    "location": "Remote",
    "commitment": "Full-Time",
    "department": "Commercial",
    "allLocations": [
      "Remote"
    ]
  },
  "salaryRange": {
    "max": 120000,
    "min": 100000,
    "currency": "USD",
    "interval": "per-year-salary"
  },
  "workplaceType": "remote"
}