Senior Cloud Detection & Response Security Engineer

Aurora; Seattle (WA); Hybrid; USD 189,000 - 303,000; Full time

Benefits offered by this job

Annual bonus

Equity compensation

Benefits

Job summary

Aurora in Seattle is seeking a Staff Cybersecurity Engineer to mature cloud and enterprise detection within the D&R team. Lead cross-functional projects, mentor SOC engineers, and drive detection coverage across cloud and corporate environments.

The role combines hands-on engineering with collaboration across Cloud Infrastructure, IT, and Platform teams, and requires a strong track record in threat detection, incident response, and MITRE ATT&CK expertise. Hybrid work schedule.

Qualifications

• Ten or more years in security with leadership of cross-functional security projects.
• Strong foundation in threat detection and incident response.
• Cloud security experience across major providers and telemetry sources.
• Experience building or maturing detection infrastructure—SIEM, data pipelines.
• Expertise with endpoint detection and response (EDR) and SaaS security monitoring.
• Experience authoring detections and measuring coverage against adversary behavior.
• Incident management experience and cross-department collaboration.
• Familiarity with MITRE ATT&CK framework and NIST CSF.
• Ability to write quality, testable Python code.

Responsibilities

• Drive cross-functional projects to mature detection infrastructure, log ingestion, and detection-as-code pipelines.
• Expand detection coverage across cloud and enterprise environments.
• Design, build, and tune detections for cloud control plane, identity-based attacks, endpoints, SaaS threats, and CI/CD abuse.
• Partner with Cloud Infra, IT, and Platform teams to embed logging and detection requirements.
• Integrate threat intel and adversary emulation into detection priorities; conduct proactive threat hunting.
• Respond to security incidents and participate in on-call rotations; share lessons learned.
• Mentor SOC engineers on detection practices and contribute to quarterly planning.

Skills

Threat detection

Incident response

Cloud security

SIEM pipelines

EDR

Python

MITRE ATT&CK

NIST CSF

Tools

SIEM

Security data lake

EDR

Job description

Aurora in Seattle is seeking a Staff Cybersecurity Engineer to mature cloud and enterprise detection within the D&R team. Lead cross-functional projects, mentor SOC engineers, and drive detection coverage across cloud and corporate environments.

The role combines hands-on engineering with collaboration across Cloud Infrastructure, IT, and Platform teams, and requires a strong track record in threat detection, incident response, and MITRE ATT&CK expertise. Hybrid work schedule.