Senior Threat Detection & Incident Response Engineer

Cypress HCM; United States; On-site; USD 174,000 - 190,000; Full time

Job summary

Cypress HCM is seeking a senior Threat Detection and Response engineer in the United States to lead investigations, build detection models, and mentor teammates on the TDR team. You will design and optimize security capabilities, partner with Legal, Privacy, and Engineering, and help coordinate incident response across the organization.

You should bring 5+ years in security operations, strong Python/SQL/Pandas skills, and familiarity with Elasticsearch and AWS services.

Qualifications

• 5+ years in security operations including detection engineering and incident response.
• Proficiency in Python; SQL and Pandas are frequently used.
• Familiarity with Elasticsearch preferred; AWS services experience helpful.
• Self-motivated problem-solver able to work independently.
• Ability to lead in complex situations through influence.

Responsibilities

• Perform investigations of security incidents using forensics and data analytics.
• Develop detection models and automation to identify threats at scale.
• Hunt for threats in corporate and production environments.
• Collaborate with Engineering, Legal, and Privacy for large-scale response.
• Identify gaps in logging and detection, driving visibility improvements.
• Support and mentor team members on threat detection and incident response.

Skills

Python

SQL

Pandas

Threat hunting

Incident response

Tools

Elasticsearch

AWS

EC2

S3

Lambda

Job description

Cypress HCM is seeking a senior Threat Detection and Response engineer in the United States to lead investigations, build detection models, and mentor teammates on the TDR team. You will design and optimize security capabilities, partner with Legal, Privacy, and Engineering, and help coordinate incident response across the organization.

You should bring 5+ years in security operations, strong Python/SQL/Pandas skills, and familiarity with Elasticsearch and AWS services.