Senior Detection Engineer, EDR – Defensive Agent

Job not on LinkedIn

🔥 5 minutes ago

🇺🇸 United States – Remote

💵 $195k - $230k / year

⏰ Full Time

🟠 Senior

👷🏻‍♀️ Engineer

👻 Ghost score 20%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Horizon3.ai

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2019

🔒 Cybersecurity

🤖 Artificial Intelligence

☁️ SaaS

Cybersecurity • Artificial Intelligence • SaaS

Horizon3. ai is a cybersecurity company that specializes in autonomous penetration testing through its platform, NodeZero. The company's mission is to proactively identify and address attack vectors before they can be exploited, allowing organizations to continuously assess their security posture across various environments including cloud, IoT, and on-premises systems. Founded by veterans from the US Special Operations and National Security sectors, Horizon3. ai offers a self-service SaaS solution that provides organizations with insights into their security vulnerabilities without requiring persistent or credentialed agents.

📋 Description

• Partner with Product to turn EDR effectiveness and tuning ambitions into concrete, buildable requirements • Translate blue team workflows and pain into prioritized product outcomes • Push back on features or agent behavior that would not hold up in a real SOC • Define acceptance criteria for detection, effectiveness, and tuning features • Validate releases against acceptance criteria before customers see them • Serve as the domain reference for Engineering and AI research • Provide design reviews, technique guidance, and vendor behavior guidance • Own current knowledge of major EDR and endpoint platforms at the console, policy, telemetry, and API levels • Maintain knowledge of detection logic, prevention policies, exclusions, and tuning across products • Define vendor-specific policy semantics across differently modeled platforms • Track platform changes, new detection capabilities, and vendor guidance • Keep the coverage model current as vendors ship changes • Define correct tuning recommendations and grade agent output against that standard • Partner with the Attack team to ground technique coverage and detection expectations in current adversary tradecraft

🎯 Requirements

• 6+ years in detection engineering, security operations, incident response, or threat hunting • Meaningful practitioner experience rather than solely advisory experience • Hands-on production experience administering and tuning EDR platforms • Experience writing detections, managing policies and exclusions, and investigating real alerts • Deep understanding of SOC workflows involving EDR output • Understanding of false-positive and false-negative tradeoffs, alert fatigue, and detection coverage measurement • Strong working knowledge of MITRE ATT&CK and detection coverage frameworks • Understanding of post-compromise attacker behavior and endpoint and identity telemetry • Experience shaping a product or platform as a domain expert • Ability to influence without authority • Exceptional technical writing skills • Ability to translate between engineers, AI researchers, product managers, SOC analysts, and executives • Scripting ability, ideally Python, to query APIs, inspect telemetry, and prototype analyses • Comfort with SQL and large volumes of event and telemetry data

🏖️ Benefits

• Equity package in the form of stock options for all full-time roles • Health, vision, and dental insurance for you and your family • Flexible vacation policy • Generous parental leave • Career development opportunities • Inclusive and collaborative culture • Remote and hybrid work models depending on role and location