Staff Security Engineer: Detection & Response (Cloud)

IBM; City of Poughkeepsie (NY, AR); On-site; USD 150,000 - 230,000; Full time

Job summary

Confluent in New York State is seeking an experienced security engineer focused on detection and response to strengthen our infrastructure security engineering team. You will develop and maintain cloud-based monitoring solutions, threat hunting, and incident response capabilities to protect real-time data platforms.

You will collaborate with engineering and compliance to ensure visibility and secure-by-default practices as we scale.

Qualifications

• 8+ years of relevant industry experience in detection and response or similar security engineering role in a cloud-first environment.
• Deep, expert-level domain knowledge in detection engineering and security incident response.
• Experience instrumenting telemetry and building high-quality detections in large-scale deployments (e.g., Kubernetes, containers, multi-cloud).
• Proficiency in Python or Golang to design tooling, automation, and data pipelines.
• Experience with incident response and containment in a cloud-first environment.
• Experience with logging and security event management tools (SIEM, log aggregation, SOAR).
• Ability to work with a remote team using data-driven engineering decisions and cross-functional collaboration.

Responsibilities

• Architect, build, and maintain scalable cloud-based security monitoring solutions across logging pipelines and SIEM ingestion.
• Drive long-term threat-hunting roadmap by translating adversary tradecraft into high-signal detections.
• Triage security alerts and drive incidents to closure, participating in on-call rotation.
• Research new threat vectors and align detection program with current threat landscape.
• Improve detection rules and metrics (coverage, precision, MTTD) with engineering teams.
• Collaborate with teams to build logging pipelines for relevant security telemetry.
• Contribute to strategy, risk management, and prioritization for detection and response.
• Provide mentorship and leadership to security engineers across the organization.

Skills

Detection engineering

Security incident response

Telemetry instrumentation

Python

Golang

Cloud security

Kubernetes

Multi-cloud

Threat hunting

Education

Master's Degree

Tools

SIEM

SOAR

Log aggregation

Open-source security tools

Job description

Confluent in New York State is seeking an experienced security engineer focused on detection and response to strengthen our infrastructure security engineering team. You will develop and maintain cloud-based monitoring solutions, threat hunting, and incident response capabilities to protect real-time data platforms.

You will collaborate with engineering and compliance to ensure visibility and secure-by-default practices as we scale.