Remote Detection Engineering Lead, AI Security

Madrona Venture Labs; United States; On-site; USD 200,000 - 250,000; Full time

Benefits offered by this job

Company-paid health insurance

401K with employer match

Self-managed PTO

Parental leave

Job summary

Dropzone AI is seeking a Senior/Principal Detection Engineer to lead AI-driven detection content and shape the future of security operations. You will work with product management and engineering to improve SIEM content, assess detection efficacy, and advance defense techniques.

This 100% remote role focuses on innovation, threat research, and building scalable detection capabilities with a strong startup mindset. Excellent communication and a track record in detection engineering are essential.

Qualifications

• 5+ years of experience in detection engineering.
• Deep expertise with two or more major SIEM platforms (e.g., Microsoft Sentinel, Splunk, QRadar, Elastic, Chronicle, Sumo Logic).
• Strong understanding of endpoint, cloud, identity, network, and SaaS telemetry.
• Expertise in MITRE ATT&CK, adversary emulation, and detection coverage analysis.
• Experience building and tuning high-fidelity detections at scale.
• Strong understanding of modern attacker tradecraft across Windows, Linux, cloud, identity, and SaaS environments.
• Excellent communication skills with practitioners, executives, and customers.

Responsibilities

• Lead Detection Engineering initiatives and drive AI-assisted detection content.
• Partner with engineering to encode detection knowledge into the product and design evaluation rubrics.
• Stay current on emerging threats and conduct original detection research.
• Collaborate across R&D to enhance detection efficacy and lifecycle management.

Skills

Detection engineering

SIEM platforms

MITRE ATT&CK

Threat detection

Communication

Startup mindset

Data-driven

Tools

Microsoft Sentinel

Splunk

QRadar

Job description

Dropzone AI is seeking a Senior/Principal Detection Engineer to lead AI-driven detection content and shape the future of security operations. You will work with product management and engineering to improve SIEM content, assess detection efficacy, and advance defense techniques.

This 100% remote role focuses on innovation, threat research, and building scalable detection capabilities with a strong startup mindset. Excellent communication and a track record in detection engineering are essential.