Detection Engineer
Copart, Inc.4 days ago
Dallas, TX, USAMid Level
Responsibilities
- Design, author, map, document, and tune behavioral detections across endpoint, identity, network, and cloud telemetry.
- Manage detection rules, macros, and lookups as version-controlled code through branching, pull requests, validation, and automated deployment.
- Write Python or comparable scripts and tooling for coverage reporting, data normalization, and other repetitive detection-engineering tasks.
- Review AI-generated detection logic, triage, enrichment, prompts, agent skills, and tool integrations before deployment.
- Validate detections against historical telemetry and known-good or known-bad events, monitor detection health, and investigate silent failures.
- Partner with Incident Response and log source engineering, contribute to attack simulation, and maintain detection documentation, runbooks, and metrics.
- Communicate detection logic, coverage gaps, and technical risks to technical and non-technical audiences.
Requirements
- Demonstrable cybersecurity experience in detection engineering, security operations, threat hunting, incident response, or security automation.
- Hands-on experience writing and tuning detection or search logic in a SIEM, EDR, or log analytics platform.
- Ability to reason from adversary techniques to the telemetry that reveals them.
- Practical experience with AI-assisted engineering or LLM tooling for authoring or analysis, including the ability to verify and correct generated output.
- Comfort with version control, pull-request collaboration, and scripting in Python or a comparable language.
- Exceptional written and verbal communication, strong analytical skills, attention to detail, and sound investigative judgment.
- Preferred: approximately 2 or more years in cybersecurity engineering, detection, or security operations, ideally with prior IT, infrastructure, or software engineering experience.
- Preferred: experience with detection-as-code, enterprise EDR, next-generation SIEM platforms, cloud security posture management, vulnerability management, AI agent tooling, breach and attack simulation, adversary emulation, APIs, YAML, and JSON.
Benefits
- Medical, dental, and vision coverage.
- 401(k) with company match, ESPP, and Employee Assistance Program.
- Vacation, sick pay, paid company holidays, life insurance, AD&D insurance, and employee discounts.
About Copart, Inc.
Copart operates a global online vehicle auction marketplace that remarkets salvage and clean‑title cars for insurance companies, lenders, fleet owners, dealerships, and the general public to buyers such as dealers, dismantlers, rebuilders, exporters, and end users. The company generates fees from auctions and related services across North America, Europe, the Middle East, and Brazil. Founded in 1982 and headquartered in Dallas, it is publicly traded on Nasdaq and owns brands like CashForCars.com.