Senior Security Detection & Response Engineer (Remote)

Circle; Boston (MA); Remote; USD 125,000 - 193,000; Full time

Job summary

Circle, a leading internet financial platform, is seeking a Principal Security Detection & Response engineer. You will lead projects across cloud, blockchain, and AI surfaces, building detection coverage and response capability with Circle teams.

You’ll own on-call duties, guide incident response, and help advance SIEM, SOAR, and security tooling. The role requires deep AWS, blockchain security knowledge and hands-on programming with Python or Go.

Qualifications

• 10+ years in detection, response, or security engineering.
• 3+ years incident handling, especially with engineering teams.
• Deep cloud security knowledge in AWS: IAM, KMS, EKS.
• Experience with blockchain/crypto threat defense.
• Experience using AI tooling to accelerate work and address threats.
• Extensive knowledge of SIEM, Case Management, and SOAR (e.g., Panther, Tines).
• Knowledge of macOS OS/file systems/memory.
• Programming in Python or Go.
• Experience with Detections As Code.
• Strong collaboration and communication in high-stress environments.

Responsibilities

• Identify and respond to security threats across cloud, endpoint, blockchain, and AI surfaces.
• Develop detection coverage for on-chain threats and custody interactions.
• Extend detections for AWS/EKS attacks and misconfigurations.
• Include AI risk detection and credential exposure mitigation.
• Advance deployment of AI to SOC for detection triage and workflows.
• Maintain core tooling like SIEM and Orchestration platforms.
• Identify gaps and gain visibility through logging and detection.
• Lead incidents and coordinate cross-team investigations.
• Build detection techniques for anomalous behavior.
• Provide security guidance across the organization.
• Support threat modeling, vulnerability scans, audits, and tooling.
• Take on-call shifts every 3rd week and some weekends.

Skills

Security engineering

Incident response

AWS security

Blockchain security

Python/Golang

Detections As Code

SIEM/SOAR

Threat modeling

On-call support

Cloud security monitoring

AI risk management

Panther

Tines

Tools

Panther

Tines

Job description

Circle, a leading internet financial platform, is seeking a Principal Security Detection & Response engineer. You will lead projects across cloud, blockchain, and AI surfaces, building detection coverage and response capability with Circle teams.

You’ll own on-call duties, guide incident response, and help advance SIEM, SOAR, and security tooling. The role requires deep AWS, blockchain security knowledge and hands-on programming with Python or Go.