תיאור המשרה
Description
We're looking for a Senior Security Engineer to join our globally distributed, high-impact security engineering team. You will design and implement detection logic, investigate alerts, and automate response mechanisms. As an early hire, you'll work closely with our platform and AI teams to shape how autonomous threat detection and response is built and delivered at scale.
Responsibilities:
Lead Investigations: Triage, analyze, and respond to alerts across cloud, endpoint, and network environments with automation-first principles.
Build Detections: Write detection logic and behavioral rules as code that is clear, testable, and scalable.
Automate Response Workflows: Develop Go-based automation for enrichment, containment, and remediation playbooks.
Define Detection-as-Code Practices: Implement a detection and response framework with strong engineering fundamentals (testing, CI/CD, version
control).
Collaborate Across Functions: Partner with platform and AI teams to integrate detection logic into the broader Daylight stack.
Support DFIR: Participate in incident investigations and post-incident reviews; DFIR skills (memory, disk, or cloud forensics) are a strong plus.
Requirements
Security Operations Experience: 3+ years in detection engineering, incident response, or blue team roles.
Automation Mindset: You automate what others manually repeat. Experience building or integrating automated response systems is key.
Cloud-Native Awareness: Familiarity with detecting and responding to threats in cloud environments (AWS, GCP, or Azure).
DFIR Skills: Practical experience in digital forensics and incident response — logs, memory, containers, cloud.
Threat-Informed Thinking: Comfort with attacker tactics and techniques (MITRE ATT&CK, behavioral detection, threat modeling).