Detection Engineer

Job not on LinkedIn

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $100k - $160k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

👷🏻‍♀️ Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Artemis

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2025

🎖️ Defense

💼 Consulting

🤖 Artificial Intelligence

Defense • Consulting • Artificial Intelligence

Artemis is a company positioning itself as the world’s first AI-native protection layer. It offers security solutions that leverage artificial intelligence to detect, prevent, and mitigate threats across digital applications and infrastructure. The company appears product-focused and is actively hiring.

📋 Description

• Design, implement, and own high-fidelity detections across AWS, Azure, GCP, Okta, Entra ID, EDR, and SaaS log sources from hypothesis to production • Manage detection content as software with version control, peer review, automated validation and testing, and CI/CD deployment across customer environments • Measure detection coverage against MITRE ATT&CK, prioritize gaps, and close them based on real-world threat activity • Build and run attack simulations and test harnesses to validate true positives and benign activity • Analyze detection performance, tune false positives and false negatives, and sunset ineffective detections • Use AI-assisted workflows to author, convert, test, and document detection rules and build trustworthy AI-generated detection tooling • Establish behavioral baselines and engineer anomaly detections for identity, cloud, and SaaS activity • Design detections producing rich, structured context for AI-powered investigation • Translate threat intelligence, incident findings, and threat hunt results into durable behavioral detection logic • Partner with Apollo analysts and security researchers to improve detections and document alerts • Adapt and tune detection content to customer environments and business contexts

🎯 Requirements

• 5+ years of hands-on cybersecurity experience, with significant time in detection engineering • Proven experience designing, building, and tuning detections at scale across SIEM, EDR, or custom detection platforms • Strong proficiency in Sigma, KQL, SPL, or YARA-L • Coding ability, preferably in Python, for automation and testing • Deep knowledge of MITRE ATT&CK and attacker tactics, techniques, and procedures across cloud, identity, endpoint, and SaaS telemetry • Experience with Git, peer review, automated testing, and CI/CD for detection content • Experience using AI tools for detection authoring, tuning, or validation • Experience building behavioral or anomaly-based detections and establishing activity baselines • Strong log-analysis skills and ability to distinguish malicious activity from benign noise • Clear written and verbal communication skills for documenting detection logic and explaining coverage and trade-offs • Bonus: experience in MDR, MSSP, or high-volume SOC environments • Bonus: experience with Atomic Red Team or purple teaming • Bonus: threat hunting or cloud incident response background • Bonus: UEBA or statistical/ML-based detection methods • Bonus: experience building AI-assisted detection or investigation tooling • Bonus: contributions to open-source detection content or the detection engineering community

🏖️ Benefits

• Top-of-market equity component • Competitive compensation • Autonomy to shape the direction of the operation and own outcomes • Mentorship and learning opportunities • Inclusive work environment