4 hours ago
Base Salary
$183k - $229k/yr
Responsibilities
- Build, tune, version-control, peer-review, and deploy detections across endpoint, identity, SaaS, and cloud environments.
- Measure detection coverage, precision, and time-to-detect, including coverage against MITRE ATT&CK.
- Own incident response from triage through containment, remediation, and retrospective analysis.
- Build automation to reduce investigation toil and collaborate across global time zones.
- Define telemetry requirements for new systems with infrastructure and product teams.
- Proactively threat hunt across the technology estate and turn hypotheses into detections or documented coverage.
Requirements
- Typically 5–8 years of experience in detection engineering, incident response, or threat hunting, with hands-on experience writing and tuning detections.
- Proficiency in at least one programming language, such as Python or Go, and ability to write production-grade detection and automation code.
- Experience with a modern SIEM or detection pipeline such as Panther, Elastic, or Splunk, including shipping and tuning detection logic in production.
- Practical experience leading or playing a major role in triaging and closing real security incidents.
- Experience with detections as code, CI/CD, peer review, and staged rollout is preferred.
- Experience defining telemetry contracts before systems ship, familiarity with cloud-native and Kubernetes telemetry, and experience with fraud or financial-crime detection patterns are preferred.
- Ability to critically evaluate and verify AI-assisted work through testing, source-checking, and validation is preferred.
Benefits
- San Francisco-based role with regular office work and a strong preference for local or relocating candidates.
- Relocation support is available for the right candidate.
- Follow-the-sun pager rotation so engineers are not typically paged at 3 a.m. local time.
- Access to the latest hardware and software, including frontier AI models on day one.
- Total rewards include bonus, equity, medical and dental benefits, and flexible time off.
Tech Stack
Categories
About Flexport
Our mission is to make global trade so easy that there will be more of it.