Description

You will build, maintain, and scale detection systems that provide actionable intelligence to security teams and customers.

This role is hybrid.

Responsibilities

• Develop and maintain Python and YAML-based detections, software, and systems.
• Research threat surfaces and telemetry to propose coverage and efficacy improvements.
• Write clean, efficient, and reusable Python code while conducting peer code reviews.
• Collaborate with cross-functional teams to gather requirements and implement detections.
• Build runbooks, reports, and supporting documentation for detection surfaces.

Required Skills

• 4+ years of professional experience as a Detection Developer.
• Proficiency in Python and YAML for detection development.
• Experience with Windows Security/Sysmon logs and Linux telemetry.
• Strong understanding of adversary TTPs and the MITRE ATT&CK framework.
• Experience with SIEM tools such as Splunk or Elastic Stack.
• Proficiency in static and dynamic malware analysis.
• Experience running red team toolsets including Responder and Bloodhound.
• Skill in network analysis and packet capture using Wireshark.
• Experience authoring Sigma and Yara rules and developing anomaly-based detections.
• Required professional security or cloud certifications (e.g., CISSP, GNFA, GCFA, GCFE, or GREM).

Preferred Skills

• OSCP or OSCE certifications.
• Experience leading Agile development teams.
• History of technical influence through public conference talks or papers.

Key Skills

Education

Any Graduate