Detection Engineer

Job Summary

Working remotely on a night shift from Wednesday to Saturday, 5pm-3am MST, the full-time Detection Engineer will analyze EDR telemetry and alerts across various domains, publish threat information for customers, and enhance detection workflows through automation.

Key responsibilities

• Analyze EDR telemetry, alerts, and log sources across Endpoint, Identity, Network, and Cloud/SaaS detection domains
• Publish threats for customers using clear communication to convey key indicators and remediation context
• Improve Detection Engineering workflows through orchestration and automation to manage high volumes of telemetry

Required qualifications

• Ability to work the required night shift from Wednesday to Saturday, 5pm MST - 3am MST
• Strong experience in Endpoint (EDR) and one or more functional areas including Cloud/SaaS, Identity, Email, or Network
• Expertise in query languages and understanding syntax across EDR or security platforms such as SQL or Lucene
• Demonstrated curiosity and active exploration of AI tools to enhance workflows and problem-solving