Staff Security Engineer I - Detection & Response (Remote)

IBM; Boston (MA); On-site; USD 161,000 - 299,000; Full time

Job summary

Confluent is seeking an experienced security engineer to join our infrastructure security engineering team with a focus on Detection and Response. You will leverage your threat detection and response background to build foundational systems that keep our infrastructure secure and scalable, collaborating with engineers and compliance analysts.

You will mentor peers, own open-ended projects, and drive programs to maintain visibility across environments.

Qualifications

• 8+ years of relevant industry experience in detection and response or similar security engineering role in a cloud-first environment.
• Deep, expert-level domain knowledge in detection engineering and security incident response.
• Experience instrumenting telemetry and building high-quality detections in large-scale, heterogeneous deployments (e.g., Kubernetes, containers, multi-cloud).
• Proficient ability in writing code using Python or Golang to design complex tooling, automation, and data pipelines.

Responsibilities

• Architect, build and maintain scalable cloud-based security monitoring solutions across logging pipelines, ETL jobs, and SIEM ingestion.
• Drive the long-term roadmap for threat hunting by translating adversary tradecraft and threat models into high-signal detection strategies.
• Build processes and workflows to triage security alerts and drive incidents to closure, including on-call rotation for incident response.
• Research new threat attack vectors and align the program with current threat landscape.
• Improve detection rules by defining metrics and partnering with engineering to eliminate issues.
• Collaborate with engineering to build logging pipelines and secure-by-default visibility.
• Contribute to strategy, risk management and prioritization for detection and response.
• Provide technical guidance and mentorship to other engineers.

Skills

Detection engineering

Incident response

Threat hunting

Telemetry

Python

Golang

Cloud-first

SIEM/SOAR

Education

Bachelor's Degree

Master's Degree

Tools

Kubernetes

Containers

Multi-cloud

SIEM

SOAR

Job description

Confluent is seeking an experienced security engineer to join our infrastructure security engineering team with a focus on Detection and Response. You will leverage your threat detection and response background to build foundational systems that keep our infrastructure secure and scalable, collaborating with engineers and compliance analysts.

You will mentor peers, own open-ended projects, and drive programs to maintain visibility across environments.