Remote Senior Threat Detection Engineer

Cribl; Columbus (OH); Remote; USD 140,000 - 200,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

401(k)

Job summary

Cribl is seeking a senior security engineer to lead detections as code, hunt threats, and drive incident response. You will own detection pipelines, collaborate with IT, Legal, and Product Security, and help shape the security telemetry for a leading telemetry platform.

The role emphasizes hands-on detection engineering, cloud investigations, and strong Python/KQL skills. You will operate in a remote-first environment with global teams, and report to the Sr.

Qualifications

• 5+ years in security operations with hands-on time in detection engineering, threat hunting or incident response.
• Experience writing and maintaining detections as code in a modern SIEM.
• Strong Python skills and comfort with Git-based workflows, CI/CD.
• Strong in KQL for writing detection queries.
• Working knowledge of MITRE ATT&CK for coverage analysis, not just labeling.
• Experience investigating incidents in cloud, SaaS, and identity providers.

Responsibilities

• Design, build, test, and tune detections as code (KQL) through a GitOps workflow.
• Plan and run hypothesis-driven hunts across cloud, SaaS, identity, endpoint, and corporate infrastructure telemetry.
• Take part in IR rotation: triage, scope, contain, and investigate security incidents from first alert to closure.
• Assist in ownership of health of security log flow and data pipelines (Cribl Stream).
• Mentor teammates through code reviews, pairing, and documentation.

Skills

Python

KQL

Git & CI/CD

Threat hunting

Incident response

Education

Bachelor's degree in CS/C Cybersecurity

Tools

Cribl Stream

Sigma rules

Atomic Red Team

Caldera

GitHub Actions

Job description

Cribl is seeking a senior security engineer to lead detections as code, hunt threats, and drive incident response. You will own detection pipelines, collaborate with IT, Legal, and Product Security, and help shape the security telemetry for a leading telemetry platform.

The role emphasizes hands-on detection engineering, cloud investigations, and strong Python/KQL skills. You will operate in a remote-first environment with global teams, and report to the Sr.