Security Engineer: Detection & Response with Automation

Sentry; San Francisco (CA); Hybrid; USD 155,000 - 400,000; Full time

Benefits offered by this job

Commuter Stipend

Professional Development Stipend

Flexible PTO

Charitable Matching Program

Job summary

Sentry is seeking a security engineer to build and operate detection systems, lead investigations, and strengthen IAM and incident response. You will collaborate across teams to prevent and respond to incidents in a fast-moving developer-centric environment, with strong emphasis on automation and threat research.

The role offers cross-functional exposure across appsec, infrasec, governance, and privacy, with opportunities to grow within a small, high-trust team.

Qualifications

• 2+ years of industry experience in a detection and response, corporate security, or generalist security engineering role.
• Degree in Computer Science or a related field, equivalent training, or professional experience.
• Hands-on experience with alert triage, detection tuning and writing, detection-as-code, security log ingestion, investigations and security incident response, IAM, phishing response, user access reviews, EDR tooling.
• Proficient in Python and agentic development workflows.
• Familiarity with distributed cloud tech (AWS, GCP, Azure, Kubernetes, Docker, Terraform) and corporate IAM (SSO, SAML).
• Strong written and verbal communication skills.

Responsibilities

• Maintain, improve, and own detection engineering systems.
• Perform investigations and contribute to security incident response.
• Contribute to, maintain, and operate IAM systems.
• Opportunity to grow across multiple security domains.
• Research, identify, and respond to emerging threats relevant to Sentry.

Skills

Security incident response

Detection engineering

IAM management

Python programming

Education

Bachelor's in CS or related field

Tools

EDR

SIEM

CNAPP

ZTNA

Job description

Sentry is seeking a security engineer to build and operate detection systems, lead investigations, and strengthen IAM and incident response. You will collaborate across teams to prevent and respond to incidents in a fast-moving developer-centric environment, with strong emphasis on automation and threat research.

The role offers cross-functional exposure across appsec, infrasec, governance, and privacy, with opportunities to grow within a small, high-trust team.