Senior Threat Detection & Response Engineer

🔥 12 hours ago

🇺🇸 United States – Remote

💵 $151.7k - $222.4k / year

⏰ Full Time

🟠 Senior

👷🏻‍♀️ Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 1%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Allstate

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1931

💼 Consulting

📦 Logistics

🛡️ Insurance

💰 Post-IPO Equity on 2014-01

Consulting • Logistics • Insurance

Allstate is an industry leader in providing insurance solutions, focusing on home, auto, device, and identity protection. With a commitment to customer well-being, Allstate aims to instill peace of mind and financial security for its customers. The company also emphasizes community impact and sustainability through various initiatives, showcasing their dedication to social responsibility and positive change.

📋 Description

• Define, design, and build AI/ML pipelines for investigation, triage, enrichment, and detection generation • Own delivery of AI-assisted investigation and triage from data foundations and feature/enrichment pipelines through model selection, evaluation, and safe production deployment • Set standards for validating, explaining, and trusting AI/ML outputs in detection and response workflows • Design and own the detection-as-code pipeline, including repository structure, detection schema, peer review, automated testing, and staged CI/CD deployment across SIEM, XDR, and endpoint detection surfaces • Define technical standards, reusable patterns, and quality controls for detection content • Build tooling and APIs for authoring, testing, and debugging detections • Design AI-driven automation and SOAR-style workflows for phishing, DLP, enrichment, routing, and verified-benign report closure • Build response automation, playbooks, containment actions, and integrations to reduce dwell time and mean time to respond • Establish and maintain a MITRE ATT&CK coverage baseline • Partner with Threat Intelligence and Threat Hunting to convert findings into durable, tested detections • Establish continuous validation through breach-and-attack simulation and purple-team activities • Lead technical projects end-to-end, including scoping, execution, delivery accountability, and outcome ownership • Serve as the senior-most individual-contributor technical authority and final technical escalation point for detection engineering • Influence roadmap and tooling decisions with internal platform partners and help shape a global follow-the-sun operating model

🎯 Requirements

• Hands-on experience designing and building AI/ML pipelines for security data, including data and enrichment foundations, model evaluation, production deployment, and guardrails • Experience writing, versioning, testing, and shipping detections as code • Deep hands-on detection engineering experience across SIEM and EDR/XDR platforms • Fluency in KQL, SQL, Sigma, or equivalent • Strong scripting/development skills, such as Python or Go • Experience mapping detections to MITRE ATT&CK and partnering with threat hunting and threat intelligence • Experience leading technical projects to completion and owning delivery outcomes • Ability to explain detection strategies, AI/ML design choices, and engineering trade-offs to engineers and senior leaders • Background investigation required • Allstate generally does not sponsor individuals for employment-based visas for this position • Dedicated, private workspace free from distractions when working from home • Reliable internet with minimum speeds of 50 MB download and 5 MB upload • Nice to have: AI-assisted/agentic SOC experience; security data engineering or streaming pipeline experience; enterprise SIEM, XDR, and EDR experience; purple-team, adversary-emulation, or breach-and-attack-simulation experience; financial services, insurance, or regulated, high-scale environment exposure

🏖️ Benefits

• Comprehensive technology setup, including a laptop, monitors, headset, keyboard, and mouse • Monthly connectivity reimbursement for employees eligible to work from home