Senior Security Engineer

Daylight; United States; Remote; USD 140,000 - 190,000; Full time

Job summary

Daylight is seeking a Senior Security Engineer to join our globally distributed security team. Design and implement detection logic, investigate alerts, and automate response as we scale autonomous threat detection.

Early hire will partner with platform and AI teams to shape the Daylight stack. Responsibilities include leading investigations across cloud, endpoint and network, writing detections as code, and developing Go-based automation for enrichment, containment and remediation.

Qualifications

• 3+ years in detection engineering, incident response, or blue team roles.
• Automation mindset with experience building or integrating automated response systems.
• Cloud-native security experience in AWS, GCP, or Azure.
• DFIR skills: logs, memory, containers, cloud.
• Threat-informed thinking with MITRE ATT&CK and threat modeling.

Responsibilities

• Lead investigations: triage, analyze, and respond to alerts across cloud, endpoint, and network environments.
• Build detections: write detection logic as code that is clear, testable, and scalable.
• Automate response workflows: develop Go-based automation for enrichment, containment, and remediation.
• Define detection-as-code practices with testing, CI/CD, and version control.
• Collaborate with platform and AI teams to integrate detection logic into the Daylight stack.
• Support DFIR: participate in incident investigations and post-incident reviews.

Skills

Automation mindset

Cloud-native security

DFIR skills

MITRE ATT&CK

Threat-informed thinking

Tools

Go

Job description

Daylight is a security services company delivering Managed Agentic Security Services (MASS), including MDR, threat hunting, security data lake, and more, through a fundamentally different architecture than traditional security services providers.

Daylight's architecture combines an agentic platform that runs the full cycle from detection to response with security experts from IR and threat hunting backgrounds. The platform collects identity and business context across systems to investigate alerts and continuously learns your environment. Security experts validate decisions, feed insights into the platform, optimize detections, and take over in case of an incident.

The result: security teams move from firefighting to strategic work.

We're looking for a Senior Security Engineer to join our globally distributed, high-impact security engineering team. You will design and implement detection logic, investigate alerts, and automate response mechanisms. As an early hire, you'll work closely with our platform and AI teams to shape how autonomous threat detection and response is built and delivered at scale.

Responsibilities:

• Lead Investigations: Triage, analyze, and respond to alerts across cloud, endpoint, and network environments with automation-first principles.
• Build Detections: Write detection logic and behavioral rules as code that is clear, testable, and scalable.
• Automate Response Workflows: Develop Go-based automation for enrichment, containment, and remediation playbooks.
• Define Detection-as-Code Practices: Implement a detection and response framework with strong engineering fundamentals (testing, CI/CD, version control).
• Collaborate Across Functions: Partner with platform and AI teams to integrate detection logic into the broader Daylight stack.
• Support DFIR: Participate in incident investigations and post-incident reviews; DFIR skills (memory, disk, or cloud forensics) are a strong plus.

Requirements:

• Security Operations Experience: 3+ years in detection engineering, incident response, or blue team roles.
• Automation Mindset: You automate what others manually repeat. Experience building or integrating automated response systems is key.
• Cloud-Native Awareness: Familiarity with detecting and responding to threats in cloud environments (AWS, GCP, or Azure).
• DFIR Skills: Practical experience in digital forensics and incident response — logs, memory, containers, cloud.
• Threat-Informed Thinking: Comfort with attacker tactics and techniques (MITRE ATT&CK, behavioral detection, threat modeling).