Endpoint Detection Engineer Jobs

1 job found

Today

Google San Jose, CA

San Jose, CA

Today

$123k - $174k/yr Full time Cybersecurity Tools Detection Engineering Endpoint Detection

Security Engineer II role focused on Enterprise Detection Engineering to help protect enterprise systems, users, and detection capabilities.

Collaborate with peers to plan and execute threat models and scope detection requirements for enterprise surfaces, with emphasis on high-risk areas such as Insider Exfiltration, Access Abuse, and Malicious Process Execution.
Partner with engineers to design and implement parts of detection logic for systems that include 2–3 interconnected components, aiming for broad coverage across enterprise surfaces.
Evaluate security risks and support detection strategy decisions using threat intelligence and risk models.
Improve existing detections by designing and implementing changes that reduce false positives and increase detection fidelity.
Contribute to post-exercise analysis (for example, Red Team and Purple Team) by identifying detection gaps, documenting findings, and implementing remediation detections.
Work with peers to propose and implement incremental improvements to detection engineering pipelines, testing frameworks, and automation tooling.

Bachelor’s degree or equivalent practical experience.
1 year of experience with security assessments, security design reviews, or threat modeling.
1 year of coding experience in one or more general purpose languages.
Experience in security engineering, computer and network security, and security protocols.

Experience building tools or automating workflows to improve security operations.
Experience using query languages (for example, SQL or Logica) and detection rule formats (for example, Yara-L, YARA, Sigma).
Some on-the-job or in-classroom experience in detection engineering, security operations (SOC), threat hunting, or incident response.
Knowledge of building and tuning detections on enterprise surfaces including macOS, Linux, and Google Workspace/SaaS.
Knowledge of AI and agentic systems and concepts.
Familiarity with MITRE ATT&CK and threat modeling methodologies.

Location: San Jose, CA (onsite)

Education: Bachelor’s degree or equivalent practical experience

New Endpoint Detection Engineer Jobs, daily.