Remote Threat Detection Engineer

Cribl; Nashville (TN); Remote; USD 140,000 - 200,000; Full time

Benefits offered by this job

Health insurance

Dental plan

Vision plan

Disability insurance

Life insurance

Paid holidays

Paid time off (PTO)

Fertility treatment benefit

401(k)

Equity

Job summary

Cribl is seeking a senior security engineer to join Team Alpine, focusing on detections, threat hunting, and incident response. You will own detections as code, map to MITRE ATT&CK, and improve log pipelines and SIEM integrations.

You'll work across IT, Security, and Legal, mentoring teammates while shaping automation, runbooks, and detection coverage. This remote-first role reports to the Sr. Director, Security Engineering and Operations.

Qualifications

• 5+ years in security operations, with hands-on time in detection engineering, threat hunting, or IR.
• Experience writing and maintaining detections as code in a modern SIEM.
• Strong Python and Git-based workflows, CI/CD.

Responsibilities

• Design, build, test, and tune detections as code (KQL) through a GitOps workflow.
• Plan and run hypothesis-driven hunts across cloud, SaaS, identity, endpoint, and infra telemetry.
• Triage, scope, contain, and investigate security incidents from first alert to closure.
• Own health of security log flow and data pipelines; maintain Cribl Stream pipeline health and SIEM integration.
• Mentor teammates via code reviews and documentation; collaborate with IT, Infra, and GRC.

Skills

Python

KQL

Git & CI/CD

SIEM

MITRE ATT&CK

Threat hunting

Tools

Cribl Stream

Sigma

GitHub Actions

Job description

Cribl is seeking a senior security engineer to join Team Alpine, focusing on detections, threat hunting, and incident response. You will own detections as code, map to MITRE ATT&CK, and improve log pipelines and SIEM integrations.

You'll work across IT, Security, and Legal, mentoring teammates while shaping automation, runbooks, and detection coverage. This remote-first role reports to the Sr. Director, Security Engineering and Operations.