Senior Security Engineer

Jobgether SRL; United States; On-site; USD 140,000 - 210,000; Full time

Job summary

Partner Company in the United States is seeking a Senior Security Engineer to join a globally distributed security engineering team. You will investigate threats, develop detection logic, and automate response workflows across cloud, endpoint, and network environments.

You will build Go-based automation, establish Detection-as-Code practices, and collaborate with AI and platform teams to scale security capabilities.

Qualifications

• At least 3 years of experience in detection engineering, incident response, security operations, or blue team roles.
• Practical experience investigating security alerts across cloud, endpoint, and network environments.
• Ability to automate repetitive security tasks and build automated response systems.
• Familiarity with cloud security monitoring in AWS, GCP, or Azure.
• Hands-on DFIR experience including logs, memory, containers, or cloud environments.
• Understanding of attacker tactics, behavioral detection, and MITRE ATT&CK.

Responsibilities

• Investigate, triage, analyze, and respond to security alerts across cloud, endpoint, and network environments, prioritizing automation wherever possible.
• Develop detection logic and behavioral rules as code, ensuring they are clear, testable, maintainable, and scalable.
• Build Go-based automation for alert enrichment, threat containment, remediation, and incident response playbooks.
• Establish and improve Detection-as-Code practices, incorporating testing, CI/CD, and version control.
• Collaborate with platform engineering and AI teams to integrate detection capabilities into the broader security stack.
• Identify opportunities to automate repetitive security operations tasks and improve investigations.
• Contribute to DFIR, including incident investigations and post-incident reviews.
• Continuously improve detection quality and response workflows based on findings and threats.

Skills

Detection engineering

Incident response

Automation

Go programming

CI/CD pipelines

Cloud security

Threat modeling

MITRE ATT&CK

Digital forensics

Memory analysis

Tools

AWS

GCP

Azure

Git

CI/CD tools

Job description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Security Engineer based in the United States. Join a globally distributed security engineering team building the next generation of autonomous threat detection and response solutions. As a Senior Security Engineer, you will combine security expertise with software engineering to investigate threats, develop scalable detection logic, and automate response workflows across cloud, endpoint, and network environments. You will help transform security operations by replacing repetitive manual tasks with intelligent, automation-first processes. Working closely with platform and AI specialists, you will shape how autonomous security capabilities are designed, tested, and deployed at scale. This early-stage opportunity offers significant technical ownership and the chance to influence a modern security architecture. Your work will help organizations strengthen their defenses, accelerate incident response, and focus security teams on higher-impact strategic priorities.

Accountabilities

• Investigate, triage, analyze, and respond to security alerts across cloud, endpoint, and network environments, prioritizing automation wherever possible.
• Develop detection logic and behavioral rules as code, ensuring they are clear, testable, maintainable, and scalable.
• Build Go-based automation for alert enrichment, threat containment, remediation, and incident response playbooks.
• Establish and improve Detection-as-Code practices, incorporating testing, continuous integration and continuous delivery (CI/CD), and version control.
• Collaborate with platform engineering and AI teams to integrate detection capabilities into the broader security technology stack.
• Identify opportunities to automate repetitive security operations tasks and improve the speed, consistency, and effectiveness of investigations.
• Contribute to digital forensics and incident response (DFIR), including incident investigations and post-incident reviews.
• Continuously improve detection quality, response workflows, and security engineering practices based on operational findings and emerging threats.

Requirements

• At least 3 years of experience in detection engineering, incident response, security operations, or blue team roles.
• Practical experience investigating security alerts and responding to threats across relevant technology environments.
• Demonstrated ability to automate repetitive security tasks and build or integrate automated response systems.
• Familiarity with cloud security monitoring and threat detection in AWS, Google Cloud Platform (GCP), or Microsoft Azure.
• Hands-on digital forensics and incident response experience, including analysis of logs, memory, containers, or cloud environments.
• Understanding of attacker tactics and techniques, behavioral detection, threat modeling, and the MITRE ATT&CK framework.
• Ability to develop and maintain detection logic as code using sound engineering practices.
• Familiarity with Go or the ability to develop Go-based automation and response workflows.
• Understanding of testing, CI/CD pipelines, and version control in security engineering.
• Strong analytical, investigative, and troubleshooting skills, with the ability to work collaboratively across engineering and security teams.

Benefits

• Opportunity to help shape an emerging autonomous security platform as an early team member.
• High-impact work at the intersection of security engineering, threat detection, incident response, and AI.
• Collaboration with a globally distributed team of security and technology specialists.
• Significant technical ownership and opportunities to influence detection engineering and response automation practices.