Senior Detection Engineer

We are seeking a Senior Detection Engineer to advance our detection engineering

strategy within the Enterprise Security team. This role is essential to safeguarding

EA's cloud and production environments will directly impact our ability to

detect, respond to, and prevent cyber threats at scale.

As a senior individual contributor reporting to the Director of Threat Intelligence

and Detections, you will play a central role in the technical leadership of the

Detection Engineering team. You'll mentor junior engineers, help define

engineering direction, and lead the development of scalable threat

detection solutions, including those applying AI and cloud-native technologies.

Responsibilities 

Technical Leadership

• Design and operationalize advanced detections across cloud, container, and on-prem environments.

• You will build integrations for diverse data sources (e.g., Wiz, host telemetry, network sensors) into EA's detection infrastructure.
• You will define detection lifecycle processes governance, and performance metrics.
• Lead development of AI-driven detection proof-of-concepts
• Guide peers in building scalable, maintainable detection infrastructure and tuning detection content.
• Support priorities like product detection assessments, threat-led risk prioritization, and production telemetry uplift.

Minimum Qualifications

• Experience in detection engineering, security engineering, or software development with a focus on cybersecurity.
• Experience developing detections and integrations within SIEM platforms (e.g., Splunk, Elastic, QRadar), use of Risk-based alerting
• Skills in Python and JavaScript, with familiarity in NodeJS and Kubernetes environments.
• Familiarity with cybersecurity frameworks (e.g., MITRE ATT&CK, Cyber Kill Chain, NIST CSF).
• Experience with cloud security platforms (e.g., Wiz) and integrating their outputs into detection pipelines.
• Background in AI/ML or data science applied to cybersecurity detections.
• Understanding of cloud-native architectures, container security, and host-based detection.
• Experience leading PoCs or greenfield development plans in a complex security ecosystem.