Senior Security Engineer: Threat Detection and Response

IBM; Armonk (NY); On-site; USD 140,000 - 180,000; Full time

Job summary

Confluent, a leader in real-time data streaming, seeks an experienced security engineer to join the infrastructure security team in detection and response. You will architect scalable security tooling and mentor other engineers as we protect cloud-native environments.

You will implement threat-hunting roadmaps, translate attack models into high-signal detections, and collaborate with engineering and compliance to ensure visibility and secure-by-default infrastructure across multi-cloud

Qualifications

• 8+ years in detection and response or security engineering in cloud-first environments.
• Deep expertise in detection engineering and incident response.
• Experience instrumenting telemetry and building detections in Kubernetes, containers, and multi-cloud.
• Proficient in Python or Golang for tooling, automation, and pipelines.
• Proven incident response and containment in cloud-first environments.
• Experience with open-source or commercial logging/SEIM/SOAR solutions.
• Ability to work with remote teams and drive engineering decisions with data.

Responsibilities

• Architect, build and maintain scalable cloud-based security monitoring solutions across logging pipelines, ETL and SIEM ingestion.
• Drive the long-term threat hunting roadmap and translate adversary tradecraft into detections.
• Build processes to triage security alerts and drive incidents to closure, including on-call rotation.
• Research new threat vectors to keep the program aligned with current threats.
• Improve detection rules by tracking metrics like coverage and precision with engineering teams.
• Collaborate with engineering to build logging pipelines and secure-by-default visibility for new infra.
• Contribute to strategy, risk management, and prioritization for detection and response efforts.
• Provide technical guidance, mentorship, and leadership to other engineers.

Skills

Security engineering

Threat detection

Incident response

Mentorship

Cloud security

Education

Master's Degree

Tools

Kubernetes

Containers

Multi-cloud

Python

Golang

SIEM

SOAR

Job description

Confluent, a leader in real-time data streaming, seeks an experienced security engineer to join the infrastructure security team in detection and response. You will architect scalable security tooling and mentor other engineers as we protect cloud-native environments.

You will implement threat-hunting roadmaps, translate attack models into high-signal detections, and collaborate with engineering and compliance to ensure visibility and secure-by-default infrastructure across multi-cloud