Detection & Response Security Engineer - Cloud & SIEM

IBM; San Diego (CA); On-site; USD 140,000 - 190,000; Full time

Job summary

Confluent is seeking an experienced security engineer to join our infrastructure security engineering team with a focus on Detection and Response. You will lead threat detection, build scalable security monitoring, and mentor other engineers while partnering with compliance analysts to maintain visibility across environments.

Ideal candidates will have 8+ years in detection and response, strong skills in Python or Golang, and experience with Kubernetes, containers, and multi-cloud deployments.

Qualifications

• 8+ years of relevant industry experience in detection and response or similar security engineering role in a cloud-first environment.
• Deep, expert-level domain knowledge in detection engineering and security incident response.
• Proficient ability in writing code using Python or Golang to design complex tooling, automation, and data pipelines.
• Demonstrated experience with effective incident response and containment practices, preferably in a cloud-first environment.
• Ability to work alongside a remote team and drive engineering decisions with a data-driven mindset.

Responsibilities

• Architect, build and maintain cloud-based security monitoring solutions, including logging pipelines and SIEM ingestion.
• Develop a long-term roadmap for threat hunting and translate threat models into detection strategies.
• Triage security alerts and drive incidents to closure, including on-call participation for incident response.
• Research new threat vectors and align detection program with current threat landscape.
• Improve detection rules by tracking metrics and collaborating with engineering teams.

Skills

Detection engineering

Security incident response

Python

Golang

Kubernetes

Containers

Multi-cloud

Data pipelines

Education

Master's Degree

Tools

Kubernetes

SIEM

SOAR

Log aggregation

Job description

Confluent is seeking an experienced security engineer to join our infrastructure security engineering team with a focus on Detection and Response. You will lead threat detection, build scalable security monitoring, and mentor other engineers while partnering with compliance analysts to maintain visibility across environments.

Ideal candidates will have 8+ years in detection and response, strong skills in Python or Golang, and experience with Kubernetes, containers, and multi-cloud deployments.