Threat Detection Engineer — AI-Driven Security Ops

ID.me; San Francisco (CA); On-site; USD 113,033 - 140,000; Full time

Benefits offered by this job

Medical, Dental, Vision

401(k) with company match

Unlimited PTO

Commuter benefits

Job summary

ID.me is seeking a Threat Detection Engineer to join our security engineering and operations team in Mountain View, CA. You will develop, test, and optimize high-fidelity detections across modern security data platforms, with a focus on security analytics, automation, and threat detection at scale.

You will design AI-enabled detection workflows, work with IaC, and collaborate with incident response, threat intel, and platform teams to cover cloud and enterprise environments — including AI system

Qualifications

• 2–4 years in security engineering or related role.
• Experience with Splunk, Elastic Stack, Chronicle, or Logstash.
• Proficient in Python and SQL.
• Experience writing detection logic with Sigma or YARA-L.
• Hands-on with AI APIs and prompts, AI security concepts.

Responsibilities

• Design and implement detection logic across SIEM/SOAR platforms.
• Build scalable rules and anomaly models aligned with MITRE ATT&CK.
• Develop detection-as-code using Python and Sigma/YARA-L.
• Evaluate LLM-assisted detection and triage workflows.
• Maintain AI-augmented detection pipelines and NL parsing.
• Assess AI-specific risks, including prompt injection.
• Perform QA of alerts to reduce false positives.
• Query large datasets with SQL in Snowflake environment.
• Contribute to IaC workflows for deployment (Terraform, GitOps).
• Collaborate with Threat Intelligence and IR teams.
• Participate in red/blue exercises and post-incident reviews.
• Maintain 24x7 on-call coverage during EST hours.

Skills

Python

SQL

AI literacy

LLM APIs

Threat detection

Tools

Splunk

Elastic Stack

Google Chronicle

Logstash

Sigma

YARA-L

Kusto

Lucene

Terraform

GitHub

Job description

ID.me is seeking a Threat Detection Engineer to join our security engineering and operations team in Mountain View, CA. You will develop, test, and optimize high-fidelity detections across modern security data platforms, with a focus on security analytics, automation, and threat detection at scale.

You will design AI-enabled detection workflows, work with IaC, and collaborate with incident response, threat intel, and platform teams to cover cloud and enterprise environments — including AI system