Senior Detection & Response Engineer - On-site NYC

Legora; Newark (NJ); On-site; USD 180,000 - 280,000; Full time

Benefits offered by this job

Union Square office with daily lunch

Comprehensive benefits package

401(K) with generous company match

Unlimited PTO

Maven Clinic access

Aura identity protection

MetLife legal coverage

Job summary

Legora in Manhattan, NY, is seeking an experienced security operations professional to own detection and response across endpoints, identity, cloud workloads, SaaS, and AI systems. Hunt, triage, investigate, contain, and drive incidents to resolution, turning learnings into better detections and controls.

You will build detections as production software, align to MITRE ATT&CK, and lead post-incident reviews.

Qualifications

• 5+ years in detection engineering, incident response, or security operations.
• Proficient in Python and SQL to build detections and telemetry pipelines.
• Experience using LLMs and agents in security workflows.
• Ability to correlate signals across endpoints, identity, cloud, and SaaS telemetry.

Responsibilities

• Own detection and response across endpoints, identity, cloud workloads, SaaS, and AI systems. Hunt, triage, investigate, contain, and drive incidents to resolution.
• Build detections as production software and maintain CI/CD pipelines, measuring coverage and time to detection.
• Create threat models, telemetry, and response playbooks for AI systems and agents.
• Develop and supervise agents for triage and investigation with guardrails for containment actions.
• Map coverage to MITRE ATT&CK and validate with threat intel and pen tests.
• Lead on-call rotation and act as incident commander for security incidents.
• Coordinate with Corporate Security, People, and Legal, and work with Vulnerability Management.
• Track campaigns targeting AI companies and coordinate phish/impersonation takedowns.

Skills

Detection engineering

Incident response

Python

SQL

LLMs

Telemetry pipelines

Tools

SPL

KQL

YARA-L

Sigma

SQL

Job description

Legora in Manhattan, NY, is seeking an experienced security operations professional to own detection and response across endpoints, identity, cloud workloads, SaaS, and AI systems. Hunt, triage, investigate, contain, and drive incidents to resolution, turning learnings into better detections and controls.

You will build detections as production software, align to MITRE ATT&CK, and lead post-incident reviews.