Senior Threat Detection & Response Engineer (Clearance Required)

True Anomaly, Inc.; Long Beach (CA); On-site; USD 120,000 - 165,000; Full time

Benefits offered by this job

Best-in-class healthcare

Daily catered lunch & snacks

Equity participation

401(k) &Parental Leave

Dog Fridays

HSA/HRA options

Job summary

True Anomaly seeks talented engineers to advance space-domain security. As Threat Detection & Response Engineer III, you will shape detection capabilities, incident response processes, and security tooling to strengthen our threat posture in a fast-paced, mission-critical environment.

You will design detections for corporate and cloud environments, tune rules, and lead investigations while collaborating with IT, Engineering, Legal, and Compliance.

Qualifications

• Active Secret/TS security clearance and ability to maintain a security clearance
• 3+ years of experience in cybersecurity, with at least 2 years focused on security operations, detection engineering, incident response, or threat hunting
• Experience in building or tuning security detections
• Familiarity with risk-based alerting and alert tuning, including strategies to reduce noise, improve detection fidelity, and prioritize high-signal alerts
• Familiarity with EDR platforms, including basic alert triage and response actions
• Working knowledge of Windows, MacOS, or Linux endpoint security and common attack techniques
• Familiarity with SIEM platforms and log analysis (e.g., Splunk, Elastic, or similar)
• Basic understanding of common attack vectors, TTPs, and security frameworks such as MITRE ATT&CK and the Cyber Kill Chain
• Experience with scripting (Python, PowerShell, or Bash) for automation or analysis tasks
• Clear verbal and written communication skills

Responsibilities

• Develop incident response plans, playbooks, and SOPs; build scalable processes to support future team growth
• Design and implement custom security detections across corporate and cloud environments, leveraging frameworks like MITRE ATTACK
• Continuously tune detection rules and develop threat models to improve fidelity and address coverage gaps
• Monitor, triage, and respond to security alerts across multiple platforms and data sources
• Perform incident investigations through technical analysis, containment, eradication, and recovery; document findings and lessons learned
• Proactively hunt for threats and leverage threat intelligence to anticipate emerging adversary TTPs
• Administer and optimize EDR and SIEM platforms; integrate log sources to enhance visibility and correlation
• Build automation and orchestration workflows to improve response efficiency
• Partner with cross-functional teams (IT, Engineering, Legal, Compliance) and communicate technical findings to diverse stakeholders

Job description

True Anomaly seeks talented engineers to advance space-domain security. As Threat Detection & Response Engineer III, you will shape detection capabilities, incident response processes, and security tooling to strengthen our threat posture in a fast-paced, mission-critical environment.

You will design detections for corporate and cloud environments, tune rules, and lead investigations while collaborating with IT, Engineering, Legal, and Compliance.