Senior Detection Engineer — EDR & SOC Domain Expert

Horizon3; United States; Hybrid; USD 195,000 - 230,000; Full time

Benefits offered by this job

Inclusive Team

Growth Opportunities

Innovative Culture

Hybrid & Remote Work

Competitive Compensation

Job summary

Horizon3 seeks a Senior Detection Engineer to be the blue team voice inside the Defensive Agent team. You will sit between Product and Engineering as the person who defines what "correct" means. When an attack technique is detected, you decide what remediation that claim requires.

Your judgment becomes the ground truth. This is not a coding role and it is not a product management role. Product owns the roadmap, Engineering owns the implementation, and our AI researchers own how the agents

Qualifications

• 6+ years in detection engineering, security operations, incident response, or threat hunting, with practical work.
• Hands-on experience tuning EDR platforms in production, writing detections and policies.
• Deep understanding of SOC operations and how EDR outputs are used in practice.
• Strong knowledge of MITRE ATT&CK and detection coverage frameworks.

Responsibilities

• Partner with Product to turn EDR effectiveness and tuning ambitions into concrete, buildable requirements.
• Translate blue team workflows and pain into prioritized product outcomes and push back on features that won’t hold in a real SOC.
• Define acceptance criteria for detection, effectiveness, and tuning features, and validate releases before customers see them.
• Serve as the standing domain reference for Engineering and AI research: available for design reviews and technique questions.
• Own deep knowledge of major EDR platforms at the console, policy, telemetry, and API level.
• Track platform changes and keep coverage models current as vendors ship.

Skills

6+ years in detection engineering

EDR tuning in production

SOC operations understanding

MITRE ATT&CK knowledge

Post-compromise attacker behavior

Technical writing

Influence without authority

Python scripting

Tools

SQL

Job description

Horizon3 seeks a Senior Detection Engineer to be the blue team voice inside the Defensive Agent team. You will sit between Product and Engineering as the person who defines what "correct" means. When an attack technique is detected, you decide what remediation that claim requires.

Your judgment becomes the ground truth. This is not a coding role and it is not a product management role. Product owns the roadmap, Engineering owns the implementation, and our AI researchers own how the agents