Senior Detection Engineer

REI; Seattle (WA); Hybrid; USD 130,000 - 208,000; Full time

Benefits offered by this job

Employee discount

Health benefits

Retirement plan

Paid time off

Job summary

REI is hiring a Senior Detection Engineer on our Security Operations team in Seattle. You will build and tune alerts across SIEM/EDR, hunt threats, and help review security events.

You’ll use scripting and automation to speed incident response and collaborate with analysts, engineers, data teams, and business partners. The role covers devices, user access, networks, cloud tools, and AI data use, with on-call rotation and remote eligibility.

Qualifications

• Bachelor's degree in CS/IS/IT or related field.
• 5+ years in security operations, detection engineering, or related roles.
• Experience creating and tuning alerts in SIEM (Splunk, Sentinel) and working with EDR tools.
• Ability to review threats across devices, networks, cloud tools, logs.
• Knowledge of MITRE ATT&CK and attacker TTPs.
• Scripting ability (Python or PowerShell) and cross-team collaboration.
• Willing to travel to Seattle HQ 1-2 times per year (remote eligible).

Responsibilities

• Build, test, and maintain threat alerts across SIEM/EDR/cloud tools.
• Tune alerts, reduce false positives, monitor event trends.
• Join threat hunts and incident reviews; help contain threats and root cause.
• Develop scripts, playbooks, and SOAR links to speed response.
• Collaborate with security, engineering, data, and business teams; participate in on-call as needed.

Skills

Security operations

Threat hunting

Incident response

Security engineering

Cross-functional collaboration

Education

Bachelor's degree in CS/IS/IT or related field

Tools

Splunk

Microsoft Sentinel

Microsoft Defender

CrowdStrike

SentinelOne

Python

PowerShell

Job description

Overview

REI Co-op is looking for a Senior Detection Engineer. You will help protect our people, members, and systems. You will join our Security Operations team. You will build ways to find and stop cyber threats. Your work will cover devices, user access, networks, cloud tools, software services, and new AI tools.

You will write and tune alerts. You will hunt for threats and help review security events. You will use scripting and automation to make incident response faster, more efficient, and more consistent. You will work with security analysts, engineers, data teams, and business partners. Together, you will close gaps, improve data, and help teams make good choices during an event.

Responsibilities and Qualifications

• Build, test, and maintain threat alerts. Use SIEM, EDR, cloud, network, SaaS, and app tools. Work with Microsoft Sentinel, Splunk, or like tools.

• Use MITRE ATT&CK, threat data, and event trends. Find gaps, cut false alerts, and improve alert quality.

• Join threat hunts and event reviews. Help contain threats, find root causes, and restore service. Turn lessons into new alerts and guides.

• Build scripts, work flows, reports, and SOAR links. Make alert review and event response fast, clear, and easy to repeat.

• Build ways to watch AI apps, copilots, agents, and AI data use. Help find data loss, stolen access, unsafe prompts, and misuse.

• Work with security, engineering, data, and business teams. Share clear updates. Take part in the on-call schedule as needed.

Qualifications

• A bachelor’s degree in computer science, information security, information technology, or a related field. An equal mix of school and work experience also meets this need.

• 5 or more years of work in security operations, detection engineering, threat hunting, incident response, or security engineering.

• Skill creating and tuning alerts in a SIEM, such as Splunk or Microsoft Sentinel. Work with EDR tools, such as Microsoft Defender, CrowdStrike, or SentinelOne.

• Skill reviewing threats across devices, user access, networks, cloud tools, or SaaS services. This includes log review and root cause work.

• Working knowledge of MITRE ATT&CK and attacker tactics, techniques, and procedures.

• Skill with at least one script language, such as Python or PowerShell. Ability to work well with both tech and business teams.

• Willing to travel to Seattle area HQ once or twice a year for business travel as needed (remote eligible role)

Closing

At REI, we believe the outdoors is for all . We are committed to becoming a fully inclusive, anti-racist, multicultural organization (https://www.rei.com/newsroom/article/rei-antiracist-multicultural-fully-inclusive-commitment) . We know that there's strength in our diversity – that each employee brings unique skills, experiences, and perspectives. Every day you are driving change, fostering a culture of respect, and knowing you're backed by benefits that support your whole life. To work towards this commitment and fulfill our brand promise of inspiring and enabling a life outside for everyone, we seek employees who demonstrate different ways of working, create a sense of belonging, and actively listen and learn.

Pay Transparency

We are committed to practices that promote pay equity and transparency. As required by applicable Pay Transparency laws, REI provides a range of compensation for roles that may be hired in locations under these requirements. Factors that may be used to determine your actual salary may include a wide array of factors, including: your specific skills and experience, geographic location or other relevant factors.

REI offers all regular employees a generous employee discount, access to health benefits, a retirement savings plan and accrued time off. for a detailed overview of benefits plans by employee profile.

Pay Range

$130,200.00 - $208,200.00 per year