Engineer, Threat Detection - 5

Remote Source: WhatJobs

See advert for pay

Overview

In this role, you’ll strengthen Tide’s security posture by building and maintaining a robust threat detection and response platform. You’ll work within the Threat Detection & Response area of Security Engineering, collaborating with cross-functional teams to automate detections and respond to incidents. You’ll hunt for threats across cloud, SaaS, and endpoints, continuously improving detections and reducing false positives. This is a hands-on role with significant impact on keeping Tide resilient and secure.

Pay / Benefits

Competitive salary and share options
Generous annual leave
Parental leave
Sabbatical options
Health insurance
Learning & development budget

Responsibilities

Develop and tune detections in the SIEM and security tooling; create custom log-parsers for in-house apps
Configure alert rules, perform log analysis and optimize detections to reduce false positives
Build security automations and services to streamline tasks (e.g., data enrichment, phishing remediation)
Proactively hunt for sophisticated threats across AWS, GCP, internal apps, and employee endpoints
Collaborate with cross-functional teams to implement business-specific threat detection rules
Ensure detector quality and uptime via test-driven development and proactive health monitoring
Identify opportunities to enhance internal tools to improve visibility and response efficiency
Lead complex incident investigations and coordinate with security, IT, and engineering teams
Support the security incident response on-call rota

Key requirements

Experience with one of: Splunk, Scanner, Sentinel, SecOps
Strong understanding of modern attack and defense techniques for Cloud (AWS, GCP), SaaS (Google Workspace, Okta) and desktop (Windows, macOS)
Hands-on security automation experience; ability to write scripts and create end-to-end automated workflows
Familiarity with SOAR platforms and automating threat detection and response tasks
Excellent written and spoken communication skills
Demonstrated ability to drive solutions to completion
Bonus: a repository showcasing automation work