Senior Threat Detection Engineer

🕒 vor 1 Monat

🇺🇸 Vereinigte Staaten – Remote

💵 $108.000 - $169.000 / Jahr

⏰ Vollzeit

🟠 Senior

👷🏻‍♀️ Ingenieur

🦅 H1B-Visum-Sponsor

Dieses Unternehmen hat in der Vergangenheit H1B-Visa gesponsert.

👻 Geisterscore 0%

Was es bedeutet: die Wahrscheinlichkeit, dass für diese Stelle niemand wirklich einstellt.So liest du es: 60 % oder höher heißt, wir halten das für einen Geisterjob. Niedrigere Werte sind weniger bedenklich.Warum dieser Wert:

• Seit 34 Tagen offen.
• Stellen bei diesem Unternehmen werden meist in 47 Tagen besetzt.

Jetzt Bewerben

Ähnliche Remote-Jobs finden

Cribl

WebsiteLinkedInAlle Stellen

501 - 1000 Mitarbeiter

Gegründet 2017

☁️ SaaS

SaaS • Cloud

Cribl ist ein Unternehmen, das einen Cloud-basierten Dienst anbietet, mit dem Benutzer ihre Daten über eine Webanwendung verwalten und analysieren können. Der Dienst umfasst Funktionen für Benutzerkonten und die Integration mit Google zur Authentifizierung.

Beschreibung

• Design, build, test, and tune detections as code (KQL) through a GitOps workflow • Map detections to MITRE ATT&CK, identify coverage gaps, and prioritize investments based on the threat model • Review community and vendor rule releases such as Sigma and decide what to adopt, adapt, or skip • Reduce alert noise by tuning and retiring ineffective rules while tracking detection quality metrics • Plan and conduct hypothesis-driven threat hunts across cloud, SaaS, identity, endpoint, and corporate infrastructure telemetry • Use adversary emulation to generate test events for detections • Convert hunt findings into durable detections, documentation, and backlog items • Participate in the incident response rotation during the initial 6–12 months • Triage, scope, contain, and investigate security incidents from first alert to closure • Run retrospectives and turn lessons into detections, playbook updates, and visibility fixes • Write and maintain incident response runbooks • Help own security log flow health, including onboarding sources, parsing, normalization, and monitoring data quality • Build and maintain Cribl Stream data pipelines to route, enrich, and reduce telemetry before SIEM ingestion • Maintain CI/CD and automation for the detection program, including GitHub Actions, SIEM API integrations, and AI-assisted gap analysis and pull request review • Design processes, standards, and tools that help the team work effectively • Mentor teammates through code review, pairing, and documentation • Collaborate with IT, Infrastructure, Engineering, and GRC to improve visibility and detection coverage • Report to the Sr. Director, Security Engineering and Operations under the CISO

🎯 Anforderungen

• 5+ years in security operations, with significant hands-on time in detection engineering, threat hunting, or incident response • Experience writing and maintaining detections as code in a modern SIEM • Strong Python skills and comfort with Git-based workflows, code review, and CI/CD • Strong KQL skills for writing detection queries • Working knowledge of MITRE ATT&CK and coverage analysis • Experience investigating incidents in cloud environments (AWS, GCP, and/or Azure), SaaS, and identity providers • Hands-on experience with log pipelines, including data ingestion, parsing, and troubleshooting • Ability to distinguish real signals from noise and determine when to escalate • Clear technical and non-technical writing skills for incident summaries, runbooks, and detection documentation • Routine use of AI in engineering work, with concrete examples of its impact on building, testing, or investigations • Bonus: experience with Cribl Stream or other telemetry pipeline tools • Bonus: experience with Sigma rules, adversary emulation (Atomic Red Team, Caldera, or similar), or purple teaming • Bonus: experience building agentic or AI-assisted workflows for security operations • Bonus: certifications such as GCIH, GCDA, or equivalent experience • Stand-by, on-call, or off-hours availability

🏖️ Vorteile

• Health insurance • Dental insurance • Vision insurance • Short-term disability insurance • Life insurance • Paid holidays • Paid time off • Fertility treatment benefit • 401(k) • Equity • Cribl Corporate Bonus Program

📊 Überprüfen Sie Ihre Lebenslauf-Bewertung für diese Stelle

Verbessern Sie Ihre Chancen auf ein Vorstellungsgespräch, indem Sie Ihre Lebenslauf-Bewertung vor der Bewerbung überprüfen.

Lebenslauf hochladen