Senior Detection Engineer: EDR & SOC Domain Expert

Horizon3; United States; Remote; USD 120,000 - 150,000; Full time

Benefits offered by this job

Growth opportunities

Innovation culture

Remote-friendly

Diversity & inclusion

Job summary

Horizon3 is seeking a Senior Detection Engineer to serve as the blue team voice within the Defensive Agent team. You will define what correctness means for detections and remediation, acting as the ground truth across Product, Engineering, and AI researchers.

This role emphasizes domain expertise over coding, focusing on how tools behave and how detections are tuned and validated. You will translate blue team workflows into concrete, buildable product requirements, set acceptance criteria for

Qualifications

• 6+ years in detection engineering, security operations, incident response, or threat hunting.
• Deep understanding of attacker behavior and its surface in telemetry.
• Hands-on experience tuning EDR platforms in production with policy/exclusions.
• Fluency in false positive/false negative tradeoffs and detection coverage.

Responsibilities

• Define acceptance criteria for detection, effectiveness, and tuning features.
• Validate releases against criteria before customers see them.
• Partner with Product to translate blue team workflows into prioritized product outcomes.
• Maintain domain truth across tools and vendor guidance to ensure consistent behavior.

Skills

Detection engineering

Python scripting

SQL querying

Technical writing

Threat hunting

SOC operations

Endpoint security

Tools

EDR platforms tuning

Python

SQL

Job description

Horizon3 is seeking a Senior Detection Engineer to serve as the blue team voice within the Defensive Agent team. You will define what correctness means for detections and remediation, acting as the ground truth across Product, Engineering, and AI researchers.

This role emphasizes domain expertise over coding, focusing on how tools behave and how detections are tuned and validated. You will translate blue team workflows into concrete, buildable product requirements, set acceptance criteria for