Senior Detection & Response Engineer — End-to-End Impact

Voiceflow; San Francisco (CA); On-site; USD 183,000 - 229,000; Full time

Benefits offered by this job

Relocation assistance

Office in San Francisco

Job summary

Flexport is seeking a Detection Engineer to own detections end-to-end for a growing security program. You will write and tune detections across endpoints, identities, SaaS, and cloud, while coordinating with a global team to minimize toil and improve time-to-detect.

You will lead incident response, automate investigations, and define telemetry requirements for new systems, with a focus on proactive threat hunting and validation of AI-assisted work.

Qualifications

• 5–8 years of experience in detection engineering, incident response, or threat hunting.
• Proficiency in at least one programming language and comfort writing production-grade detection/automation code.
• Experience with a modern SIEM (Panther, Elastic, Splunk) and tuned production detections.

Responsibilities

• Build and tune detections across endpoint, identity, SaaS, and cloud as code.
• Track detection quality: coverage against MITRE ATT&CK, precision, time-to-detect.
• Own incident response: triage, contain, remediate, and write post-incident retrospectives.
• Build automation to reduce toil and ensure cross‑timezone context.
• Define telemetry requirements before systems ship and hunt proactively across the estate.

Skills

Python

Go

CI/CD

Detection engineering

Incident response

Threat hunting

Production-grade code

Tools

Panther

Elastic

Splunk

Job description

Flexport is seeking a Detection Engineer to own detections end-to-end for a growing security program. You will write and tune detections across endpoints, identities, SaaS, and cloud, while coordinating with a global team to minimize toil and improve time-to-detect.

You will lead incident response, automate investigations, and define telemetry requirements for new systems, with a focus on proactive threat hunting and validation of AI-assisted work.