Staff Cloud Detection & Response Security Engineer

Aurora; Pittsburgh (Allegheny County); Hybrid; USD 171,000 - 273,000; Full time

Job summary

Aurora is seeking a Staff Cybersecurity Engineer to mature Cloud & Enterprise Detection within the Detection & Response team. This senior IC role will drive multi-quarter initiatives, hands-on work, and close collaboration with Cloud Infrastructure, IT, and Platform Engineering to raise the maturity of Aurora's detection program at scale.

You will design and tune detections for cloud control planes, identity-based attacks, endpoints, and SaaS threats, and participate in threat hunting, incident

Qualifications

• 10+ years of security experience with leadership of cross-functional security projects or programs from scoping to delivery.
• Strong technical foundation in threat detection and incident response.
• Expertise with cloud security across major providers and cloud telemetry sources.
• Experience building or maturing detection infrastructure (SIEM, data pipelines, log onboarding).

Responsibilities

• Lead cross-functional projects to mature detection infrastructure and CI/CD for detection content.
• Expand detection coverage across cloud and enterprise environments and prioritize improvements.
• Design, build, and tune detections for cloud workloads, identity, endpoint, and SaaS activity.
• Partner with infrastructure and IT teams to embed logging and detection requirements in system design.
• Mentor SOC engineers on cloud and enterprise detection practices and contribute to planning.

Skills

Threat detection

Incident response

Cloud security

EDR

SaaS security monitoring

Detections writing

MITRE ATT&CK

NIST CSF

Python

Tools

SIEM

Data Lake

Telemetry pipelines

Job description

Aurora is seeking a Staff Cybersecurity Engineer to mature Cloud & Enterprise Detection within the Detection & Response team. This senior IC role will drive multi-quarter initiatives, hands-on work, and close collaboration with Cloud Infrastructure, IT, and Platform Engineering to raise the maturity of Aurora's detection program at scale.

You will design and tune detections for cloud control planes, identity-based attacks, endpoints, and SaaS threats, and participate in threat hunting, incident