Staff Security Engineer – Detection Engineering

Colossus Technologies Group; United States; On-site; USD 170,000 - 210,000; Full time

Job summary

Colossus Technologies Group is seeking a Staff Security Engineer focused on detection engineering to join a fintech company. The role emphasizes building detection platforms and automated response capabilities rather than reliance on SIEM rules or SOC duties.

Ideal candidates have deep software engineering experience (Python/Go/Rust) and strong background in AWS, cloud infrastructure, distributed systems or Kubernetes.

Qualifications

• Strong software engineering background in Python, Go or Rust.
• Experience building detection platforms or security data pipelines.
• Experience with cloud platforms (AWS) and containerized environments (Kubernetes).
• Ability to automate investigations and detections.
• Experience building scalable security infrastructure for financial platforms.

Responsibilities

• Build detection systems that combine cloud, app, identity, endpoint and runtime telemetry.
• Develop custom detection engines and rules engines.
• Engineer runtime detection for cloud and container environments including Kubernetes.
• Build pipelines that collect, enrich and correlate telemetry into usable detection signals.
• Automate investigation and response to enable programmatic handling of high-confidence activity.

Skills

Python

Go

Rust

Cloud infrastructure

Kubernetes

Distributed systems

Tools

AWS

Kubernetes

Security data pipelines

Job description

Staff Security Engineer – Detection Engineering

Colossus Technologies Group is working with a high-tech fintech company to hire a Staff Security Engineer focused on building the next generation of its detection and response platform.

This isn't a SOC role and we're not looking for someone whose background is primarily administering a SIEM or writing individual detection rules.

We're looking for a security engineer who builds.

The team is working on engineering problems around:

• Building detection systems that combine cloud, application, identity, endpoint and runtime telemetry to identify sophisticated attacks
• Building custom detection engines, rules engines and behavioral detection capabilities rather than relying exclusively on vendor tooling
• Engineering runtime detection for modern cloud and container environments, including Kubernetes
• Building pipelines that collect, enrich and correlate massive amounts of security telemetry and turn it into usable detection signals
• Automating investigation and response so high-confidence activity can be handled programmatically while ambiguous cases are escalated for human investigation
• Using AI to improve security triage, investigation and detection without blindly handing decision-making to an LLM
• Building tooling that allows new detections and security controls to be developed, tested and deployed like software
• Designing detection infrastructure that can operate reliably at the scale and availability requirements of a financial platform

We're interested in engineers who have built things like detection platforms, runtime security products, malware analysis systems, rules engines, security data pipelines, EDR capabilities, automated investigation systems or other security products.

Strong software engineering ability is important. Python, Go, Rust or similar backgrounds are relevant, along with deep experience across AWS, cloud infrastructure, distributed systems or Kubernetes.

The ideal person has spent enough time investigating real attacks to understand how adversaries operate, but has also spent enough time writing software to build better ways of finding them.