Senior Detection Engineer — Security Analytics & Response

VulnU; United States; Remote; USD 168,000 - 311,000; Full time

Benefits offered by this job

Equity

Job summary

NVIDIA is seeking a Senior Detection Engineer to join the Detection and Automation Engineering team. You will build high-confidence detections across Splunk, Microsoft Sentinel/Defender, CrowdStrike, and cloud/native telemetry for enterprise, cloud, and AI environments.

You will own the detection lifecycle, translate incident findings into production-ready detections, and collaborate with responders to reduce noise and improve context. Remote work available; equity offered.

Qualifications

• 8+ years of experience in detection engineering or related security fields.
• Degree in Computer Science, Cybersecurity, Engineering, or equivalent.
• Hands-on experience building and tuning detections in a major SIEM or security analytics platform.
• Strong scripting in SPL, KQL, SQL, Python.
• Understanding of attacker behavior across identity, endpoint, cloud, network, and data theft.
• Experience with Git, CI/CD, and production-grade detections.

Responsibilities

• Build and tune high-confidence detections across platforms such as Splunk, Microsoft Sentinel/Defender, CrowdStrike, cloud logs, and SaaS‑based telemetry.
• Translate incidents and red-team findings into testable detection logic.
• Own end-to-end detection lifecycle from design to retirement.
• Collaborate with responders to reduce noise and provide actionable context.
• Coach analysts and engineers through design and query reviews.

Skills

SPL

KQL

SQL

Python

Telemetry analysis

Education

Bachelor's in CS/Cybersecurity/Engineering

Tools

Splunk

Microsoft Sentinel/Defender

CrowdStrike

CI/CD tooling

Job description

NVIDIA is seeking a Senior Detection Engineer to join the Detection and Automation Engineering team. You will build high-confidence detections across Splunk, Microsoft Sentinel/Defender, CrowdStrike, and cloud/native telemetry for enterprise, cloud, and AI environments.

You will own the detection lifecycle, translate incident findings into production-ready detections, and collaborate with responders to reduce noise and improve context. Remote work available; equity offered.