Senior Security Engineer: Detection & Auto-Response at Scale

Daylight; United States; Remote; USD 140,000 - 190,000; Full time

Job summary

Daylight is seeking a Senior Security Engineer to join our globally distributed security team. Design and implement detection logic, investigate alerts, and automate response as we scale autonomous threat detection.

Early hire will partner with platform and AI teams to shape the Daylight stack. Responsibilities include leading investigations across cloud, endpoint and network, writing detections as code, and developing Go-based automation for enrichment, containment and remediation.

Qualifications

• 3+ years in detection engineering, incident response, or blue team roles.
• Automation mindset with experience building or integrating automated response systems.
• Cloud-native security experience in AWS, GCP, or Azure.
• DFIR skills: logs, memory, containers, cloud.
• Threat-informed thinking with MITRE ATT&CK and threat modeling.

Responsibilities

• Lead investigations: triage, analyze, and respond to alerts across cloud, endpoint, and network environments.
• Build detections: write detection logic as code that is clear, testable, and scalable.
• Automate response workflows: develop Go-based automation for enrichment, containment, and remediation.
• Define detection-as-code practices with testing, CI/CD, and version control.
• Collaborate with platform and AI teams to integrate detection logic into the Daylight stack.
• Support DFIR: participate in incident investigations and post-incident reviews.

Skills

Automation mindset

Cloud-native security

DFIR skills

MITRE ATT&CK

Threat-informed thinking

Tools

Go

Job description

Daylight is seeking a Senior Security Engineer to join our globally distributed security team. Design and implement detection logic, investigate alerts, and automate response as we scale autonomous threat detection.

Early hire will partner with platform and AI teams to shape the Daylight stack. Responsibilities include leading investigations across cloud, endpoint and network, writing detections as code, and developing Go-based automation for enrichment, containment and remediation.