Tech Stack

Description

In this role, you'll track emerging threats, design context-aware detections across cloud, identity, and application layers, and lead deep investigations from first signal to root cause. You'll work at the intersection of threat intelligence, detection engineering, and incident response with an engineering-first mindset.

Requirements

• 5-7 years in security with 2+ years in threat detection, threat intelligence, or investigations
• Experience in cloud-native SaaS environments (AWS strongly preferred)
• Proficiency in Python and comfort automating security workflows
• Experience querying large datasets (SQL or similar)
• Solid understanding of incident response and digital forensics

Responsibilities

• Track emerging threats and attacker techniques relevant to cloud and SaaS
• Turn threat intelligence into practical detection strategies and attack hypotheses
• Design and maintain context-aware detections across cloud, identity, and application layers
• Lead deep investigations from first signal to root cause and remediation
• Act as technical lead during security incidents, guiding response and decision-making