Staff Threat Detection & SecOps Engineer

Envoy Inc.; San Francisco (CA); On-site; USD 180,000 - 240,000; Full time

Job summary

Envoy seeks a Staff Security Engineer to own and evolve Security Operations and Threat Detection across infrastructure, applications, and endpoints. You will define detection strategy, improve SIEM, and drive automated controls in a proactive, engineering-led security function.

The role emphasizes building reliable, measurable detection capabilities, shifting from reactive posture to engineered security. On-site at SF HQ four days a week.

Qualifications

• Extensive experience designing or improving security monitoring and SIEM systems.
• Strong background in cloud security, IAM, networking, and logging at scale.
• Proficient in scripting with Python or Go and automation to reduce toil.

Responsibilities

• Own threat detection design and security operations across infra, apps, and endpoints.
• Define detection strategy and maintain high-quality security signals.
• Lead investigations, root-cause analysis, and response coordination.
• Mentor engineers and drive measurable improvements in MTTD/MTTR.

Skills

Security monitoring

SIEM design

Cloud security (AWS)

Endpoint security (SentinelOne)

Threat detection

Programming (Python/Go)

Alerting models

Root cause analysis

Cross-functional collaboration

Mentoring/leadership

Tools

SIEM tools

SentinelOne

Job description

Envoy seeks a Staff Security Engineer to own and evolve Security Operations and Threat Detection across infrastructure, applications, and endpoints. You will define detection strategy, improve SIEM, and drive automated controls in a proactive, engineering-led security function.

The role emphasizes building reliable, measurable detection capabilities, shifting from reactive posture to engineered security. On-site at SF HQ four days a week.