Staff Detection Engineering Lead - Remote/Hybrid

LinkedIn; United States; Hybrid; USD 156,000 - 255,000; Full time

Job summary

LinkedIn is seeking a Staff Information Security Engineer in Detection Engineering. This hybrid/remote role spans endpoint, identity, cloud, and SaaS detections, focusing on high-signal detections and measurable effectiveness.

You will lead engineering standards, mentor engineers, and drive scalable detection implementations. You will collaborate across IR, Threat Intel, Cloud, IAM, and Red/Purple teams to validate coverage, emulate adversaries, and improve detection fidelity.

Qualifications

• BA/BS degree or related practical experience in security fields.
• 5+ years in security engineering, detection engineering, or incident response.
• 2+ years in technical leadership.

Responsibilities

• Define detection strategy and roadmap across priority threat scenarios.
• Turn hypotheses and TTPs into production detections; lead purple-team validation.
• Design detections-as-code with CI/CD, tests, and staged rollouts.
• Lead adversary emulation exercises to validate coverage and create tests.
• Proactive threat hunting and development of hunt playbooks.
• Build IR automation to orchestrate triage and containment.
• Ingest and enrich threat intel; translate reports into testable hypotheses.
• Maintain a SIGMA-based detection content library and translate to KQL/SQL.
• Own telemetry quality; monitor schemas, enrichment, and data reliability SLIs/SLOs.
• Establish detection quality metrics and tune continuously.
• Lead incident retros; mentor engineers on best practices.
• Participate in on-call for critical detection pipelines.

Skills

Detection Engineering

Technical Leadership

KQL/SQL

Detection-as-code

Education

BA/BS in CyberSecurity, Information Security, Computer Science or related

Tools

SIGMA

Job description

LinkedIn is seeking a Staff Information Security Engineer in Detection Engineering. This hybrid/remote role spans endpoint, identity, cloud, and SaaS detections, focusing on high-signal detections and measurable effectiveness.

You will lead engineering standards, mentor engineers, and drive scalable detection implementations. You will collaborate across IR, Threat Intel, Cloud, IAM, and Red/Purple teams to validate coverage, emulate adversaries, and improve detection fidelity.