Senior Threat Detection Engineer

🕒 Outubro 7

🇺🇸 Estados Unidos – Remoto (EUA)

💵 $108.000 - $169.000 / ano

⏰ Tempo Integral

🟠 Sênior

👷🏻‍♀️ Engenheiro

🦅 Patrocina Visto H1B

Esta empresa já patrocinou vistos H1B no passado.

👻 Score fantasma 0%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

Cribl

SiteLinkedInTodas as Vagas

501 - 1000 funcionários

Fundada em 2017

☁️ SaaS

SaaS • Cloud

A Cribl é uma empresa que oferece um serviço em nuvem, permitindo que os usuários gerenciem e analisem seus dados por meio de uma aplicação web. O serviço inclui recursos de contas de usuário e integração com o Google para autenticação.

Descrição

• Design, build, test, and tune detections as code (KQL) through a GitOps workflow • Map detections to MITRE ATT&CK, identify coverage gaps, and prioritize investments based on the threat model • Review community and vendor rule releases such as Sigma and decide what to adopt, adapt, or skip • Reduce alert noise by tuning and retiring ineffective rules while tracking detection quality metrics • Plan and conduct hypothesis-driven threat hunts across cloud, SaaS, identity, endpoint, and corporate infrastructure telemetry • Use adversary emulation to generate test events for detections • Convert hunt findings into durable detections, documentation, and backlog items • Participate in the incident response rotation during the initial 6–12 months • Triage, scope, contain, and investigate security incidents from first alert to closure • Run retrospectives and turn lessons into detections, playbook updates, and visibility fixes • Write and maintain incident response runbooks • Help own security log flow health, including onboarding sources, parsing, normalization, and monitoring data quality • Build and maintain Cribl Stream data pipelines to route, enrich, and reduce telemetry before SIEM ingestion • Maintain CI/CD and automation for the detection program, including GitHub Actions, SIEM API integrations, and AI-assisted gap analysis and pull request review • Design processes, standards, and tools that help the team work effectively • Mentor teammates through code review, pairing, and documentation • Collaborate with IT, Infrastructure, Engineering, and GRC to improve visibility and detection coverage • Report to the Sr. Director, Security Engineering and Operations under the CISO

🎯 Requisitos

• 5+ years in security operations, with significant hands-on time in detection engineering, threat hunting, or incident response • Experience writing and maintaining detections as code in a modern SIEM • Strong Python skills and comfort with Git-based workflows, code review, and CI/CD • Strong KQL skills for writing detection queries • Working knowledge of MITRE ATT&CK and coverage analysis • Experience investigating incidents in cloud environments (AWS, GCP, and/or Azure), SaaS, and identity providers • Hands-on experience with log pipelines, including data ingestion, parsing, and troubleshooting • Ability to distinguish real signals from noise and determine when to escalate • Clear technical and non-technical writing skills for incident summaries, runbooks, and detection documentation • Routine use of AI in engineering work, with concrete examples of its impact on building, testing, or investigations • Bonus: experience with Cribl Stream or other telemetry pipeline tools • Bonus: experience with Sigma rules, adversary emulation (Atomic Red Team, Caldera, or similar), or purple teaming • Bonus: experience building agentic or AI-assisted workflows for security operations • Bonus: certifications such as GCIH, GCDA, or equivalent experience • Stand-by, on-call, or off-hours availability

🏖️ Benefícios

• Health insurance • Dental insurance • Vision insurance • Short-term disability insurance • Life insurance • Paid holidays • Paid time off • Fertility treatment benefit • 401(k) • Equity • Cribl Corporate Bonus Program

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo