Security Engineer II, Enterprise Detection Engineering
Job Description
Security Engineer II role focused on Enterprise Detection Engineering to help protect enterprise systems, users, and detection capabilities.
Responsibilities
- Collaborate with peers to plan and execute threat models and scope detection requirements for enterprise surfaces, with emphasis on high-risk areas such as Insider Exfiltration, Access Abuse, and Malicious Process Execution.
- Partner with engineers to design and implement parts of detection logic for systems that include 2–3 interconnected components, aiming for broad coverage across enterprise surfaces.
- Evaluate security risks and support detection strategy decisions using threat intelligence and risk models.
- Improve existing detections by designing and implementing changes that reduce false positives and increase detection fidelity.
- Contribute to post-exercise analysis (for example, Red Team and Purple Team) by identifying detection gaps, documenting findings, and implementing remediation detections.
- Work with peers to propose and implement incremental improvements to detection engineering pipelines, testing frameworks, and automation tooling.
Requirements
- Bachelor’s degree or equivalent practical experience.
- 1 year of experience with security assessments, security design reviews, or threat modeling.
- 1 year of coding experience in one or more general purpose languages.
- Experience in security engineering, computer and network security, and security protocols.
Preferred Qualifications
- Experience building tools or automating workflows to improve security operations.
- Experience using query languages (for example, SQL or Logica) and detection rule formats (for example, Yara-L, YARA, Sigma).
- Some on-the-job or in-classroom experience in detection engineering, security operations (SOC), threat hunting, or incident response.
- Knowledge of building and tuning detections on enterprise surfaces including macOS, Linux, and Google Workspace/SaaS.
- Knowledge of AI and agentic systems and concepts.
- Familiarity with MITRE ATT&CK and threat modeling methodologies.
Technologies
- SQL, Logica
- Yara-L, YARA, Sigma
- MITRE ATT&CK
- macOS, Linux
- Google Workspace/SaaS, ChromeOS
Compensation and Benefits
- US salary: $123,000 - $174,000 (USD) per year
- 15% bonus target
- Equity
- Benefits
Location: San Jose, CA (onsite)
Education: Bachelor’s degree or equivalent practical experience