Senior Security Engineer - Threat Detection

About the Client

The organization operates in the Internet of Things (IoT) sector, providing a cloud platform that enables companies dependent on physical operations to leverage IoT data for actionable insights and operational improvement. Its solutions support industries such as agriculture, construction, field services, transportation, and manufacturing—sectors that represent over 40% of global GDP. The organization aims to enhance safety, efficiency, and sustainability in these critical infrastructure industries through digital transformation at scale.

About the Opportunity

The SENIOR SECURITY ENGINEER - THREAT DETECTION role focuses on building and maintaining the detection platform that identifies threats against the organization and its customers. This position involves developing detection content, managing data pipelines, and enhancing automation tools to improve detection speed, safety, and effectiveness. The role requires cross-team collaboration and contributes directly to the security posture and operational resilience of the organization.

Responsibilities

• Develop, deploy, and refine MITRE ATT&CK–aligned threat detections across various telemetry sources.
• Manage the full lifecycle of detections from conception to retirement.
• Enhance the detection-as-code platform with version control, peer review, automated testing, and CI/CD processes.
• Identify new threat surfaces and integrate data ingestion and enrichment mechanisms.
• Evaluate and integrate AI-powered security solutions, assessing their benefits and risks.
• Translate threat intelligence into actionable detections and retrospective analyses.
• Collaborate closely with security operations during investigations and incident responses.
• Promote and embody the organization’s cultural principles as it scales globally.

Requirements

• Minimum of 6 years in security engineering, detection engineering, or related fields.
• Proficiency in Python and SQL for analyzing large datasets and validating detections.
• Experience with detection-as-code, Git workflows, automated testing, and CI/CD deployment.
• Deep knowledge of modern SIEM platforms, including data onboarding and threat intelligence integration.
• Familiarity with AWS, Linux, container technologies, and endpoint detection and response (EDR).
• Demonstrated ability to independently lead projects, learn new technologies rapidly, and communicate technical information clearly.