Senior Detection Engineer - Mastering Endpoint Defense

Horizon3.ai; United States; Hybrid; USD 195,000 - 230,000; Full time

Benefits offered by this job

Inclusive Team

Growth Opportunities

Innovative Culture

Hybrid & Remote Work

Competitive Compensation

Job summary

Horizon3.ai seeks a Senior Detection Engineer to shape the blue team voice within the Defensive Agent group. You will decide what remediation is required when an attack is detected, serving as the ground truth for the system and collaborating with Product, Engineering, and AI research.

You will own deep knowledge of EDR platforms, tuning policies, and coverage models, ensuring accurate, scalable detections across enterprise environments.

Qualifications

• 6+ years in detection engineering, security operations, incident response, or threat hunting.
• Hands-on experience administering and tuning EDR platforms in production.
• Deep understanding of SOC workflows and EDR outputs.
• Fluency in false positives/negatives and alert fatigue.

Responsibilities

• Partner with Product to translate detection goals into buildable requirements.
• Define acceptance criteria for detection and tuning features and validate releases.
• Serve as domain reference for Engineering and AI research during design reviews.
• Maintain fluency on major EDR platforms and policy semantics across vendors.
• Define correct tuning recommendations and grade agent output accordingly.
• Collaborate with Attack team to align coverage with adversary tradecraft.

Skills

EDR expertise

SOC operations

Threat hunting

Incident response

MITRE ATT&CK

Python scripting

SQL querying

Endpoint telemetry

Job description

Horizon3.ai seeks a Senior Detection Engineer to shape the blue team voice within the Defensive Agent group. You will decide what remediation is required when an attack is detected, serving as the ground truth for the system and collaborating with Product, Engineering, and AI research.

You will own deep knowledge of EDR platforms, tuning policies, and coverage models, ensuring accurate, scalable detections across enterprise environments.