Senior Detection Engineer, EDR & Autonomous Defense

Horizon3; United States; Hybrid; USD 195,000 - 230,000; Full time

Benefits offered by this job

Inclusive Team

Growth Opportunities

Innovative Culture

Hybrid & Remote Work

Competitive Compensation

Job summary

Horizon3 is hiring a Senior Detection Engineer to act as the blue team voice within Autonomous Defense, defining what “correct” means when an attack technique is detected. You will decide what remediation is required, serving as the ground truth that informs product, engineering, and AI research.

This role is not coding or product management, but demands deep hands-on expertise to measure system behavior and improve detection accuracy.

Qualifications

• 6+ years in detection engineering, security operations, incident response, or threat hunting.
• Hands-on experience tuning EDR platforms in production — writing detections, managing policy and exclusions, and investigating alerts.
• Deep understanding of what a SOC actually does with EDR output.
• Fluency in false positive/false negative tradeoffs, alert fatigue, and detection coverage measurement.
• Strong knowledge of MITRE ATT&CK and detection coverage frameworks.

Responsibilities

• Define acceptance criteria for detection, effectiveness, and tuning features, and validate releases against them before customers see them.
• Partner with Product to turn EDR effectiveness and tuning ambitions into concrete, buildable requirements.
• Translate blue team workflows into prioritized product outcomes and push back when a feature would not hold up in a real SOC.
• Serve as the standing domain reference for Engineering and AI research: available for design reviews and vendor questions.

Job description

Horizon3 is hiring a Senior Detection Engineer to act as the blue team voice within Autonomous Defense, defining what “correct” means when an attack technique is detected. You will decide what remediation is required, serving as the ground truth that informs product, engineering, and AI research.

This role is not coding or product management, but demands deep hands-on expertise to measure system behavior and improve detection accuracy.