About the role
Responsibilities Build and run detection and response across cloud, identity, endpoint and SaaS Design and build security data pipelines into the SIEM or security data lake Own security operations tooling: SIEM, EDR, cloud threat detection and automation Write detections as code, map them to MITRE ATT&CK and measure coverage Lead incident response as incident commander and run blameless PIRs Requirements 5+ years in security operations, detection engineering or incident response Hands-on cloud detection and response in AWS (CloudTrail, GuardDuty, VPC Flow Logs, Kubernetes audit logs) Depth in detection engineering, incident response, SIEM architecture, SOAR or threat hunting Engineering mindset with Python, SQL or SIEM query language Calm, clear communication under pressure Preferred Qualifications Experience building SOC 2, ISO 27001 or PCI audit controls Experience managing an MDR or MSSP partner Familiarity with breach notification obligations Experience hiring or mentoring security staff Benefits Immediate, large-scale impact on a high-growth business Top-of-the-market compensation packages Work alongside top regional talent About the Company Rapidly scaling digital goods company with a cloud-native platform.