Detection and Response Engineer

🔥 3 minutes ago

🇬🇧 United Kingdom – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👷🏻‍♀️ Engineer

👻 Ghost score 10%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

VulnCheck

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2021

🔒 Cybersecurity

🤖 Artificial Intelligence

🏢 Enterprise

Cybersecurity • Artificial Intelligence • Enterprise

VulnCheck is a next-generation Cyber Threat Intelligence platform that offers businesses unprecedented visibility into the vulnerability ecosystem. It prioritizes and monitors vulnerabilities, exploit proofs-of-concept, and threat actor activities, helping organizations better defend against cyber threats. Through unique early access to vulnerability information and real-time alerting, VulnCheck enables proactive measures against evolving cyber threats, thereby strengthening the overall security posture of its clients.

📋 Description

• Design and direct AI-assisted, agentic detection workflows at scale, with human quality oversight • Author and ship network signatures and detections against internet-scale scan and probe data • Identify services, versions, and vulnerable hosts • Build detections against Canary telemetry to distinguish real exploitation from internet noise • Synthesize exploitation signals into actionable threat intelligence for customers • Drive feedback loops into probing and collection capabilities • Identify necessary data collection, unnecessary collection, and coverage gaps • Evaluate detection quality and tune false-positive and false-negative rates • Respond rapidly to high-impact vulnerabilities by analyzing, building coverage, and shipping detections • Collaborate with vulnerability researchers and threat hunters to connect detection engineering with exploit intelligence

🎯 Requirements

• 5+ years of experience building and shipping durable detections over network and host data • Experience scaling detection development and continuous evaluation processes using AI and agentic workflows with humans on the loop • Track record of researching, engineering, and validating durable detections across network and host telemetry • Disciplined approach to false positives and false negatives • Expertise in device fingerprinting and protocol analysis • Knowledge of attacker command-and-control techniques, covert channels, and exploitation artifacts • Experience with network traffic analysis • Background in host-based analysis and DFIR • Strong programming or scripting ability • Familiarity with CVE, NVD, KEV, or exploit intelligence datasets • Response mindset toward newly disclosed vulnerabilities • Preferred: Experience with Suricata, Snort, Zeek, Nuclei templates, or similar tools • Preferred: Published detection research, signatures, or open-source detection content • Preferred: Experience with streaming systems or real-time data processing • Preferred: Background in high-growth or startup environments

🏖️ Benefits

• Transparent, collaborative, and supportive culture • Growth mindset environment • Equal employment opportunity employer • Reasonable accommodations for applicants with physical and mental disabilities • AI-powered Talent Matching tool used in recruitment

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume