Cloud Security Detection Engineer – IR & Threat Hunting

IBM; Lowell (MA); On-site; USD 140,000 - 190,000; Full time

Job summary

Confluent seeks an experienced security engineer to join our infrastructure security engineering team focusing on Detection and Response. You will scale threat detection, build foundational systems, and partner with engineering to keep environments secure.

You will mentor peers, drive on-call incident response, and translate threat models into high-signal detections while pushing secure-by-default visibility across multi-cloud deployments.

Qualifications

• 8+ years in detection and response or similar security engineering role.
• Expert-level knowledge in detection engineering and incident response.
• Experience instrumenting telemetry and building detections at scale (Kubernetes, containers, multi-cloud).

Responsibilities

• Architect and maintain cloud-based security monitoring solutions across logging pipelines and SIEM ingestion.
• Drive long-term threat-hunting roadmap translating TTPs into high-signal detections.
• Triage security alerts and drive incidents to closure, including on-call rotation.
• Research new threat vectors and align detection program with current landscape.
• Improve detection rules by tracking metrics like coverage and MTTD.
• Collaborate with engineering to gather relevant telemetry and ship secure-by-default visibility.

Skills

Threat detection

Incident response

Security tooling

Python

Golang

Cloud security

Mentorship

Education

Master's Degree

Tools

Kubernetes

Containers

SIEM

SOAR

Job description

Confluent seeks an experienced security engineer to join our infrastructure security engineering team focusing on Detection and Response. You will scale threat detection, build foundational systems, and partner with engineering to keep environments secure.

You will mentor peers, drive on-call incident response, and translate threat models into high-signal detections while pushing secure-by-default visibility across multi-cloud deployments.