Senior EDR Detection Engineer (Remote)

horizon3ai; United States; Hybrid; USD 195,000 - 230,000; Full time

Benefits offered by this job

Inclusive Team

Growth opportunities

Innovative culture

Hybrid & Remote Work

Competitive Compensation

Job summary

Horizon3 is hiring a Senior Detection Engineer to join the Defens ive Agent team in the United States. You will help define what counts as correct detection and remediation when an attack technique is detected, working between Product, Engineering, and AI research.

The role emphasizes domain truth, blue-team expertise, and collaboration across SOC operations, with product owning roadmap and engineering implementing features.

Qualifications

• 6+ years in detection engineering, security operations, incident response, or threat hunting, with meaningful time spent as a practitioner.
• Hands-on operational experience administering and tuning EDR platforms in production — writing detections, managing policy and exclusions, and investigating real alerts.
• Deep understanding of what a SOC actually does with EDR output.
• Fluency in false positive and false negative tradeoffs, alert fatigue, and detection coverage measurement.
• Strong working knowledge of MITRE ATT&CK and detection coverage frameworks, and a clear view of where they help and where they mislead.
• Solid understanding of post-compromise attacker behavior and how each surfaces in endpoint and identity telemetry.

Responsibilities

• Partner with Product to turn EDR effectiveness and tuning ambitions into concrete, buildable requirements.
• Translate blue team workflows and pain into prioritized product outcomes, and push back when a proposed feature or agent behavior would not hold up in a real SOC.
• Define acceptance criteria for detection, effectiveness, and tuning features, and validate releases against them before customers see them.
• Serve as the standing domain reference for Engineering and AI research: available for design reviews, technique questions, and vendor behavior questions.

Skills

EDR expertise

Security operations

Incident response

Threat hunting

MITRE ATT&CK

Post-compromise telemetry

Python

SQL

Tools

Python

SQL

Job description

Horizon3 is hiring a Senior Detection Engineer to join the Defens ive Agent team in the United States. You will help define what counts as correct detection and remediation when an attack technique is detected, working between Product, Engineering, and AI research.

The role emphasizes domain truth, blue-team expertise, and collaboration across SOC operations, with product owning roadmap and engineering implementing features.