Senior Detection Engineer (remote eligible)

REI (Recreational Equipment Inc.); Seattle (WA); Hybrid; USD 130,000 - 208,000; Full time

Benefits offered by this job

Employee discount

Health benefits

Retirement savings plan

Paid time off

Job summary

REI Co-op is seeking a Senior Detection Engineer to strengthen our Security Operations team in Seattle. You will build and tune alerts, hunt threats, and review security events across devices, networks, cloud services, and AI tools.

You will automate incident response with scripts and SOAR workflows, collaborating with analysts, data teams, and business partners. This remote-eligible, full-time role requires collaboration with security, engineering, and operations, with occasional travel to the

Qualifications

• Bachelor’s degree in computer science, information security, information technology, or related field.
• 5+ years in security operations, detection engineering, threat hunting, incident response, or security engineering.
• Experience creating and tuning alerts in a SIEM (Splunk or Microsoft Sentinel) and working with EDR tools (Microsoft Defender, CrowdStrike, SentinelOne).
• Knowledge of MITRE ATT&CK tactics, techniques, and procedures.
• Scripting in Python or PowerShell; ability to collaborate with technical and business teams.

Responsibilities

• Build, test, and tune threat alerts using SIEM, EDR, cloud, network, SaaS, and app tools.
• Conduct threat hunts and event reviews to contain threats and identify root causes.
• Develop workflows, reports, and SOAR integrations for faster incident response.
• Monitor AI apps, copilots, and data use to detect data loss or unsafe prompts.
• Collaborate with security, engineering, data, and business teams; participate in on-call rotations.

Skills

Python or PowerShell scripting

MITRE ATT&CK knowledge

Cross-functional collaboration

Education

Bachelor’s degree in Computer Science / Information Security / IT

Tools

Splunk

Microsoft Sentinel

Microsoft Defender

CrowdStrike

SentinelOne

Job description

Overview

REI Co-op is looking for a Senior Detection Engineer. You will help protect our people, members, and systems. You will join our Security Operations team. You will build ways to find and stop cyber threats. Your work will cover devices, user access, networks, cloud tools, software services, and new AI tools.

You will write and tune alerts. You will hunt for threats and help review security events. You will use scripting and automation to make incident response faster, more efficient, and more consistent. You will work with security analysts, engineers, data teams, and business partners. Together, you will close gaps, improve data, and help teams make good choices during an event.

Responsibilities and Qualifications

• Build, test, and maintain threat alerts. Use SIEM, EDR, cloud, network, SaaS, and app tools. Work with Microsoft Sentinel, Splunk, or like tools.
• Use MITRE ATT&CK, threat data, and event trends. Find gaps, cut false alerts, and improve alert quality.
• Join threat hunts and event reviews. Help contain threats, find root causes, and restore service. Turn lessons into new alerts and guides.
• Build scripts, work flows, reports, and SOAR links. Make alert review and event response fast, clear, and easy to repeat.
• Build ways to watch AI apps, copilots, agents, and AI data use. Help find data loss, stolen access, unsafe prompts, and misuse.
• Work with security, engineering, data, and business teams. Share clear updates. Take part in the on-call schedule as needed.

Qualifications

• A bachelor’s degree in computer science, information security, information technology, or a related field. An equal mix of school and work experience also meets this need.
• 5 or more years of work in security operations, detection engineering, threat hunting, incident response, or security engineering.
• Skill creating and tuning alerts in a SIEM, such as Splunk or Microsoft Sentinel. Work with EDR tools, such as Microsoft Defender, CrowdStrike, or SentinelOne.
• Skill reviewing threats across devices, user access, networks, cloud tools, or SaaS services. This includes log review and root cause work.
• Working knowledge of MITRE ATT&CK and attacker tactics, techniques, and procedures.
• Skill with at least one script language, such as Python or PowerShell. Ability to work well with both tech and business teams.
• Willing to travel to Seattle area HQ once or twice a year for business travel as needed (remote eligible role)

Closing

At REI, we believe the outdoors is for all. We are committed to becoming a fully inclusive, anti-racist, multicultural organization. We know that there's strength in our diversity – that each employee brings unique skills, experiences, and perspectives. Every day you are driving change, fostering a culture of respect, and knowing you're backed by benefits that support your whole life. To work towards this commitment and fulfill our brand promise of inspiring and enabling a life outside for everyone, we seek employees who demonstrate different ways of working, create a sense of belonging, and actively listen and learn.

Pay Transparency

We are committed to practices that promote pay equity and transparency. As required by applicable Pay Transparency laws, REI provides a range of compensation for roles that may be hired in locations under these requirements. Factors that may be used to determine your actual salary may include a wide array of factors, including: your specific skills and experience, geographic location or other relevant factors.

REI offers all regular employees a generous employee discount, access to health benefits, a retirement savings plan and accrued time off. Click here for a detailed overview of benefits plans by employee profile.

Pay Range

$130,200.00 - $208,200.00 per year