Staff Cloud Detection & Response Engineer

AURORA; Pittsburgh (Allegheny County); Hybrid; USD 171,000 - 273,000; Full time

Benefits offered by this job

Annual bonus

Equity compensation

Benefits

Job summary

Aurora is seeking a Staff Cybersecurity Engineer to mature Cloud & Enterprise Detection within the D&R team in the Technical Assurance division. This senior IC role leads cross‑quarter initiatives to strengthen detection across cloud and enterprise environments, delivering hands‑on work and partnering with Cloud Infra, IT, and Platform Eng.

You will design and tune detections for cloud and workload activity, integrate threat intel, and mentor SOC engineers while helping guide detection

Qualifications

• 10+ years of security experience; demonstrated experience leading cross‑functional security projects or programs from scoping through delivery.
• Strong technical foundation in threat detection, incident response
• Expertise with cloud security across one or more major providers, including cloud‑native telemetry and detection sources
• Experience building or maturing detection infrastructure - SIEM or security data lake pipelines, log onboarding and normalization, detection‑as‑code workflows
• Expertise with endpoint detection and response (EDR) and SaaS security monitoring, or comparable host and application telemetry depth
• Expertise authoring and maintaining detections (anomalous, network, host, identity, or cloud activity) and measuring detection coverage against adversary behavior
• Experience with incident management, driving cross‑departmental collaboration for containment and remediation
• Expertise with MITRE ATT&CK framework and modern adversarial techniques; understanding of NIST CSF
• Ability to write quality, testable code in Python

Responsibilities

• Drive cross‑functional projects to mature Aurora's detection infrastructure, log ingestion and normalization
• Expand detection coverage across cloud and corporate environments and prioritize coverage improvements
• Design, build, and tune detections for cloud control plane and workload activity, identity‑based attacks, endpoint, SaaS threats
• Partner with Cloud Infrastructure, IT, and Platform Engineering to embed logging and detection requirements into system design
• Integrate threat intelligence and adversary emulation into detection coverage priorities, and conduct proactive threat hunting
• Respond to cloud and enterprise security incidents and participate in an on‑call rotation
• Collaborate with and mentor SOC engineers on cloud and enterprise detection practices, and contribute to quarterly planning

Skills

Threat detection

Incident response

Cloud security

EDRSAAS monitoring

MITRE ATT&CK

Tools

SIEM

Data lake pipelines

Job description

Aurora is seeking a Staff Cybersecurity Engineer to mature Cloud & Enterprise Detection within the D&R team in the Technical Assurance division. This senior IC role leads cross‑quarter initiatives to strengthen detection across cloud and enterprise environments, delivering hands‑on work and partnering with Cloud Infra, IT, and Platform Eng.

You will design and tune detections for cloud and workload activity, integrate threat intel, and mentor SOC engineers while helping guide detection