cybersecurity engineer lead, detection engineer (Remote, US)

Starbucks; Seattle (WA); Remote; USD 135,900 - 256,000; Full time

Benefits offered by this job

Medical, dental, vision insurance

401(k) retirement plan

Tuition coverage through Arizona State University

Job summary

A leading coffee company is seeking a Cybersecurity Engineer Lead to design detection strategies against real-world threats. This remote role requires hands-on experience in Detection Engineering and managing SIEM platforms. The ideal candidate will lead initiatives to enhance detection capabilities and collaborate with cross-functional teams. Extensive benefits include healthcare, tuition reimbursement, and retirement plans.

Qualifications

• 6‑8 years of experience in information technology discipline.
• 4+ years of experience in Detection Engineering.
• Strong hands-on experience with SIEM platforms.

Responsibilities

• Lead strategy for detection engineering across security platforms.
• Break down cybersecurity threats into detection strategies.
• Drive deployment of detection capabilities through metrics.

Skills

Detection Engineering

SIEM platform management

Problem-solving

Communication

Education

Bachelor's degree in relevant field or 8+ years of equivalent experience

Tools

SIEM

EDR

SOAR

Job description

Cybersecurity Engineer Lead – Detection Engineer (Remote, US)

Starbucks is looking for a cybersecurity engineer lead, detection engineer to design and build detections that power our ability to identify and stop real‑world threats.

Base Pay Range

$135,900.00/yr - $256,000.00/yr

Description

From the beginning, Starbucks set out to be a different kind of company. One that not only celebrated coffee and the rich tradition, but that also brought a feeling of connection. We are known for developing extraordinary leaders who share this passion and are guided by their service to others.

Are you passionate about advancing cutting‑edge detection engineering initiatives to safeguard our partners, customers, and brand? As a Lead Detection Engineer you’ll design and build the detections that power our ability to identify and stop real‑world threats.

You’ll turn real attacker behaviors into reliable alerts, automate how detections are built and deployed, making sure our visibility keeps pace with evolving threats. This is a hands‑on role for someone who loves diving into data, thinking like an attacker, and improving how we detect and respond every day. This role will work closely with our SOC, Incident Response, Threat Intelligence, and Security Engineering teams.

The ideal candidate combines deep technical expertise, a strong understanding of adversary TTPs, is an expert at translating compliance requirements into detection strategy and has a passion for continuous improvement in detection coverage and quality.

Responsibilities

• Lead the strategy and roadmap for detection engineering and alerting across security platforms (SIEM, EDR, SOAR, etc.)
• Break down complex cybersecurity threats and technical challenges into clear, actionable detection strategies – mapped to frameworks like MITRE ATT&CK and validated through simulation.
• Drive the deployment and continuous improvement of detection capabilities by establishing clear metrics for success, ensuring that each solution is designed end‑to‑end—from initial detection generation through seamless delivery to SOC engineer.
• Lead enterprise‑wide detection engineering initiatives, overseeing the development and deployment of advanced detection‑as‑code solutions across environments.
• Collaborate with cross‑functional teams, ensuring seamless coordination and partnership across various disciplines. Your efforts will focus on aligning diverse stakeholders and resources toward common detection and compliance objectives.
• Data‑driven detection improvements through tuning, false positive reduction, and visibility gap analysis across platforms.
• Measure effectiveness of detections through metrics such as MTTD, false positive rates, and coverage gaps.

Qualifications

• Bachelor's degree in a relevant field or 8+ years of equivalent work experience in cybersecurity engineering related roles.
• 6‑8 years of experience working in an information technology discipline.
• 6‑8 years of infrastructure / information security experience.
• 4+ years of experience in Detection Engineering.
• Strong hands‑on experience with SIEM platforms at scale.
• Proven ability to build, tune, and maintain custom threat detection rules using threat intel and enrichment data.
• Experience in building and managing detection‑as‑code workflows using version control and CI/CD pipeline.
• Advanced knowledge of cybersecurity principles, frameworks, tools and best practices.
• Experienced supporting regulatory compliance environment such as PCI.
• Strong problem‑solving and decision‑making abilities in high‑pressure situations.
• Excellent communication and collaboration skills, with the ability to work effectively with cross‑functional teams and stakeholders.
• Certifications such as CISSP, GCDA, GMON, or others focused on cybersecurity.

Benefits

As a Starbucks partner, you (and your family) will have access to medical, dental, vision, basic and supplemental life insurance, and other voluntary insurance benefits. Partners have access to short‑term and long‑term disability, paid parental leave, family expansion reimbursement, paid vacation from date of hire, sick time, paid holidays, and personal days. Starbucks also offers a 401(k) retirement plan with employer match, a discounted company stock program, equity program, incentivized emergency savings, and financial well‑being tools.

Starbucks also offers 100% upfront tuition coverage for a first‑time bachelor’s degree through Arizona State University’s online program via the Starbucks College Achievement Plan, student loan management resources, and access to other educational opportunities. You will also have access to backup care and DACA reimbursement. Starbucks will comply with any applicable state and local laws regarding employee leave benefits.

Equal Opportunity Employer Statement

Starbucks Coffee Company is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, or protected veteran status, or any other characteristic protected by law.

Qualified applicants with criminal histories will be considered for employment in a manner consistent with all federal, state and local ordinances.

Starbucks Coffee Company is committed to offering reasonable accommodations to job applicants with disabilities. If you need assistance or an accommodation due to a disability, please contact us at applicantaccommodation or 1(888) 611-2258.