Security Detection Engineer - Cloud & Identity

United States Digital Space LLC; Boston (MA); On-site; USD 130,000 - 170,000; Full time

Job summary

the company is seeking a Security Detection Engineer to serve as a key technical contributor within our Information Security team, reporting to the Information Security Manager. In this role, you will drive the design and evolution of high-fidelity, scalable detection capabilities that protect millions of members’ biometric and health data.

You will help define our detection engineering strategy across cloud, identity, endpoint, and application environments, ensuring depth of coverage, signal

Qualifications

• 4+ years of hands-on information security experience focusing on detection engineering or security operations.
• Experience writing and tuning detections across cloud, identity, endpoint or application environments.
• Strong scripting skills in Python, Go or PowerShell for automation and tool development.

Responsibilities

• Design, build, and scale high-signal detections across cloud, identity, endpoint, network, and application layers using Detection-as-Code principles.
• Develop and maintain detection logic aligned to real-world attacker behavior and frameworks such as MITRE ATT&CK across modern security platforms.
• Translate threat intelligence into actionable detections and validate effectiveness through adversary emulation and testing.
• Build behavioral detections to protect against threats such as account takeover, credential abuse, API misuse, automation attacks, privilege escalation and data exfiltration.
• Continuously improve detection quality by tuning alerts, reducing false positives, and implementing automated enrichment and triage.
• Define and track detection KPIs (e.g., precision, recall, false positive rate, MTTD) and implement processes to measure and improve detection health.
• Support and lead incident investigations, including containment, root cause analysis, and post-incident detection improvements.
• Contribute to the on-call rotation while proactively reducing operational overhead through automation.
• Partner with Engineering, IT, Infrastructure, Product and GRC to ensure systems launch with strong monitoring and detection coverage.
• Map detections to threat models, identify visibility gaps, and continuously improve coverage as the environment scales.
• Explore and apply advanced analytics and machine learning techniques to improve detection fidelity, reduce noise and enhance triage and investigation workflows.
• Stay ahead of evolving threats by researching emerging attack techniques and incorporating learnings into detection strategy.

Skills

Detection engineering

Python

PowerShell

Go

Security tooling

Education

Bachelor’s degree in Computer Science or related

Tools

YARA

SIGMA

Suricata

Job description

the company is seeking a Security Detection Engineer to serve as a key technical contributor within our Information Security team, reporting to the Information Security Manager. In this role, you will drive the design and evolution of high-fidelity, scalable detection capabilities that protect millions of members’ biometric and health data.

You will help define our detection engineering strategy across cloud, identity, endpoint, and application environments, ensuring depth of coverage, signal