Senior Detection Engineer - AI-Driven SecOps (Hybrid)

ARQ; New York (NY); Hybride; USD 140 000 - 200 000; Plein temps

Avantages offerts par ce poste

Stock options

Discretionary performance bonus

Latest tools and technology

Office policy: 3-4 days in-office

Résumé du poste

ARQ is seeking a hands-on Detection Engineer to own detection engineering end-to-end in Datadog Cloud SIEM, map detections to MITRE ATT&CK, and build automation for rule authoring, validation, and threat hunting. You will work with the CISO and a small global security team to prioritize gaps and deliver practical solutions.

You’ll develop detections as code, review pull requests, and automate incident response and containment. Strong Python and incident response experience are essential.

Qualifications

• 5+ years in security, including 3+ years owning detections in production.
• Hands-on experience with a cloud SIEM and its query language.
• Deep knowledge of AWS logs and SaaS audit logs such as Google Workspace, GitHub, GitLab or Okta.

Responsabilités

• Own detection engineering end to end in Datadog Cloud SIEM: identify missing log sources, onboarding and build reliable detection coverage.
• Write, test and tune detection rules, reducing false positives while keeping meaningful threats visible.
• Map coverage to MITRE ATT&CK and validate it by reproducing attacker activity.
• Manage detections as code, using version control, CI pipelines and code review.
• Build and run automation and AI agents for rule authoring, detection validation, coverage mapping, alert triage and threat hunting.
• Investigate security incidents, including triage, scoping, evidence collection and clear incident write-ups.
• Help develop automated response and containment capabilities.
• Track and communicate detection coverage, validation results and response performance to security leadership.

Connaissances

Python

Threat hunting

Incident response

English communication

Outils

Datadog Cloud SIEM

Splunk

Terraform

Git

AWS CloudTrail

Description du poste

ARQ is seeking a hands-on Detection Engineer to own detection engineering end-to-end in Datadog Cloud SIEM, map detections to MITRE ATT&CK, and build automation for rule authoring, validation, and threat hunting. You will work with the CISO and a small global security team to prioritize gaps and deliver practical solutions.

You’ll develop detections as code, review pull requests, and automate incident response and containment. Strong Python and incident response experience are essential.