Senior Threat Detection & Incident Response Engineer

Altruist; San Francisco, Northern (CA, KY); Hybrid; USD 200,000 - 240,000; Full time

Benefits offered by this job

Competitive total compensation

Premium healthcare, dental, and vision

401k with 4% match

16 weeks parental leave

Professional growth & L&D budget

Employee mobility program

One month work from anywhere policy

Job summary

Altruist in San Francisco, CA is seeking a Senior Detection and Response Engineer to build and refine detections and response capabilities spanning cloud, endpoints, and identity providers.

You will tune detections, investigate alerts, lead incident response, and automate playbooks while collaborating with MDR/IR partners. This role offers a hybrid schedule with 3 days onsite in SF or Culver City and a competitive compensation package.

Qualifications

• Hands-on authoring of detections in a modern SIEM.
• Investigations across cloud (AWS), endpoint, and identity data sources.
• Scripting and automation with Python.
• Independent work capability.
• Experience in detection and response engineering in security operations.
• Familiarity with MITRE ATT&CK framework is a plus.
• Comfort working in regulated fintech/financial services environments is a bonus.

Responsibilities

• Build, tune, and maintain high-fidelity detections as code across SIEM, cloud, endpoint, and identity telemetry.
• Triage and investigate alerts, lead response on security incidents, and proactively hunt threats.
• Operationalize threat intelligence and IOC ingestion into detections and edge/WAF rules.
• Develop response playbooks and automation to reduce toil and speed containment.
• Partner with MDR and IR teams and conduct purple-team exercises with red team engineers.
• Improve logging coverage and detection efficacy against MITRE ATT&CK.

Skills

Detections engineering

Incident response

Threat hunting

SIEM

AWS

Kubernetes

Datadog/Splunk

Endpoint security tools

Python

Automation

Education

B.A./B.S. in CS / CE / InfoSec

Tools

AWS

Kubernetes

Datadog

Splunk

SentinelOne

CrowdStrike

Terraform

Job description

Altruist in San Francisco, CA is seeking a Senior Detection and Response Engineer to build and refine detections and response capabilities spanning cloud, endpoints, and identity providers.

You will tune detections, investigate alerts, lead incident response, and automate playbooks while collaborating with MDR/IR partners. This role offers a hybrid schedule with 3 days onsite in SF or Culver City and a competitive compensation package.