Senior Threat Detection & Incident Response Engineer

Cypress HCM; California; On-site; USD 174,000 - 190,000; Full time

Job summary

Cypress HCM is seeking a senior Threat Detection and Response engineer to drive detection, investigation, and incident response initiatives. You will mentor teammates, build advanced detection solutions, and partner with cross-functional teams to mitigate threats.

The role emphasizes automation, data analytics, and secure incident lifecycle management across our environment in California. You will work with security partners to reduce risk and improve response times.

Qualifications

• 5+ years in security operations including detection engineering, threat hunting, and incident response.
• Proficiency in Python or similar scripting languages; SQL and Pandas used regularly.
• Experience with AWS services (EC2, S3, Lambda, RDS) preferred.
• Familiarity with Cyber Kill Chain and MITRE ATT&CK frameworks.

Responsibilities

• Perform investigations of security incidents using forensics and data analytics.
• Develop detection models and automation to identify and respond to threats at scale.
• Hunt for threats in corporate and production environments and improve detection capabilities.
• Collaborate with Legal, Privacy, and Engineering for efficient incident response.

Skills

Python

SQL

Pandas

Elasticsearch

AWS

Threat hunting

Tools

AWS (EC2, S3, Lambda)

Elasticsearch

SQL databases

Pandas

Job description

Cypress HCM is seeking a senior Threat Detection and Response engineer to drive detection, investigation, and incident response initiatives. You will mentor teammates, build advanced detection solutions, and partner with cross-functional teams to mitigate threats.

The role emphasizes automation, data analytics, and secure incident lifecycle management across our environment in California. You will work with security partners to reduce risk and improve response times.