Security Engineer - Detection and Response

Identify detection opportunities, define clear telemetry requirements, and partner with the detection infrastructure squad and data owners to make the signals needed for detection and investigation available.

Develop, test, tune, and maintain detections across endpoint, identity, cloud, SaaS, email, and other security-relevant environments.

Investigate and prioritize alerts, determine their security impact, and participate in incident containment and remediation.

Build repeatable investigation workflows and playbooks for alert triage, evidence collection, decision-making, escalation, containment, and response.