Detection Engineer & Threat Hunter — Cloud & Crypto

Hood L2; Northern (KY); Remote; USD 110,000 - 180,000; Full time

Job summary

Paxos is seeking a Detection and Response Engineer to build detections, hunts, and automations that protect cloud infrastructure, crypto systems, endpoints, and networks. You will write detections as code and automate response, acting as a purple teamer with our Product Security teams.

You’ll focus on detection engineering, threat hunting, and validation with a 24x7 SOC. Hands-on investigation skills are essential, while you support and improve the detection coverage across the stack.

Qualifications

• 3+ years of experience in security operations, detection engineering or related security engineering role.
• Hands-on experience investigating and responding to threats across endpoints, cloud, and network telemetry.
• Tuning detections in SIEM/EDR to improve signal quality and reduce false positives.
• Write or adapt detection rules from templates or patterns.
• Experience with adversary-emulation or purple-team tooling to validate detections.
• Strong automation mindset; willingness to speed up investigations with scripting/AI.

Responsibilities

• Detection Coverage & Quality: ship production-grade detections with measurable signal improvements.
• Validated Defenses: run purple-team exercises to confirm effectiveness.
• Threat Hunting Program: conduct proactive hunts and translate findings into new detections.
• Operational Efficiency: build automations and maintain runbooks for consistent response.
• Detection Stack: identify gaps and integrate tools across endpoints, cloud, and network.

Skills

Security operations

Detection engineering

Offensive security testing

SIEM

EDR

Python

Bash

Incident response

Automation

Tools

SIEM

EDR

Python

Bash

Job description

Paxos is seeking a Detection and Response Engineer to build detections, hunts, and automations that protect cloud infrastructure, crypto systems, endpoints, and networks. You will write detections as code and automate response, acting as a purple teamer with our Product Security teams.

You’ll focus on detection engineering, threat hunting, and validation with a 24x7 SOC. Hands-on investigation skills are essential, while you support and improve the detection coverage across the stack.