Senior Security Detection Engineer

🔥 1 minute ago

🇺🇸 United States – Remote

💵 $139.2k - $190k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

GitLab

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2014

💼 Consulting

📣 Marketing

🤖 Artificial Intelligence

💰 Secondary Market on 2020-11

Consulting • Marketing • Artificial Intelligence

GitLab is the most comprehensive AI-powered DevSecOps platform, offering tools for automated software delivery, security, and compliance throughout the software development lifecycle. It provides solutions across areas such as AI-assisted development, continuous integration/continuous deployment (CI/CD), source code management, and vulnerability management. GitLab aims to simplify and accelerate software delivery by uniting development, security, and operations on a unified platform. It is particularly recognized for its AI code assistants and has been named a leader in the Gartner Magic Quadrant™ for DevOps Platforms, making it a preferred choice for many enterprises.

📋 Description

• Identify MITRE ATT&CK/top threat actor detection gaps and write behavioral detections to close them • Serve as a detection subject matter expert with deep knowledge of GitLab’s detection methodology, DaC framework, detection types, and quality thresholds • Orchestrate agents across the detection lifecycle as a detection architect, ensuring detection quality and consistency • Use SIEM/data lake platforms such as Splunk or Elastic to write and troubleshoot threat detections • Collaborate with peer GitLab teams to identify and close security observability improvement opportunities • Collaborate with incident response, red team, and threat intelligence teams to improve GitLab’s detection program and coverage • Use, maintain, and build DaC, AI, and process-efficiency automations for the signals engineering program • Detect suspicious and malicious events for GitLab, its customers, and SaaS operating environments

🎯 Requirements

• SOC, incident response or detection engineering expertise • SIEM/security data lake detection and query expertise • Proven ability to proactively detect potentially malicious patterns and collaborate with incident response to complete incident RCAs and identify and implement new detection opportunities • Strong Cloud (AWS/GCP) and some PaaS (Kubernetes/Terraform) experience • Experience orchestrating teams of agents to write detections; experience building full end-to-end agentic detection pipelines is a bonus • Passion for deep-dive threat hunting and cross-functional purple teaming and turning results into detections • Experience with mature detection capabilities such as Detections as Code, Signal vs. detection development, risk-based alerting, and behavior analytics • Must be a United States Citizen • Understanding of the GitLab application is required; experience detecting and hunting attacks against GitLab or maintaining GitLab is a bonus

🏖️ Benefits

• Benefits to support your health, finances, and well-being • Flexible Paid Time Off • Team Member Resource Groups • Equity Compensation & Employee Stock Purchase Plan • Growth and Development Fund • Parental Leave