Senior Threat Detection Engineer Job at Atlassian (San Francisco)

New

Senior Logging & Detection Engineer

We are currently seeking a Senior Logging & Detection Engineer to lead the techn...

Location

Canada , Vancouver; Calgary; Toronto

Salary:

146200.00 - 197800.00 CAD / Year

Clio

Expiration Date

Until further notice

Requirements

Senior-level expertise building and scaling enterprise-grade detection capabilities and security monitoring systems
Expert-level query language proficiency in at least two of the following: Elasticsearch/Lucene, SQL, KQL (Kusto), or SPL (Splunk), demonstrating advanced optimization techniques
Extensive Detection Engineering experience owning the full lifecycle of rules, alerts, and automated response workflows within a SIEM/SOAR environment
Advanced log analysis skills across diverse, large-scale data sources, including multi-cloud logs (AWS, Azure, GCP), network flows, and advanced security tool outputs
Deep dashboard and visualization expertise with tools like Kibana, Grafana, or Tableau, specifically for security metrics and executive reporting
Proven expertise in leading threat hunting efforts using log data to proactively identify and track sophisticated threats and anomalous behavior across the environment
Senior-level scripting and automation abilities (Python/Go/PowerShell), used to build custom tools, manage APIs, and drive detection automation at scale
Architectural experience integrating and optimizing SIEM platforms, SOAR tools, and security orchestration systems
Expert performance optimization skills covering query tuning, index design, data partitioning, and overall resource-efficient analytics on big data
Significant incident response experience providing expert-level technical analysis and forensic support during major security incidents

Job Responsibility

Lead the design and implementation of sophisticated, production-ready detection rules and queries across the ELK stack, security data lakes, and multi-cloud logging platforms
Architect and optimize complex search queries, aggregations, and analytics dashboards for high-velocity security monitoring, focusing on performance and cost efficiency
Design and build automated detection and response workflows (SOAR), ensuring seamless and reliable integration with critical incident response systems
Serve as the primary liaison with the threat intelligence team, developing and owning the framework to translate intelligence into scalable, actionable detection capabilities (e.g., MITRE ATT&CK coverage)
Establish and maintain a robust detection rule library, query templates, and lead the creation of security analytics playbooks for the wider team
Drive performance optimization and resource utilization strategies across petabyte-scale log datasets, including index design and data tiering
Develop and standardize custom visualizations, dashboards, and executive reporting capabilities for security stakeholders
Lead complex threat hunting operations, mentor junior team members on investigative techniques, and proactively refine detection logic to achieve near-zero false positive rates
Collaborate closely with the platform team to define the logging architecture roadmap based on future detection requirements and security observability goals
Proactively research emerging threats and attack patterns, translating novel techniques into strategic, forward-looking detection logic and advising security leadership

What we offer

Top-tier health benefits, dental, and vision insurance
Hybrid work environment
Flexible time off policy, with an encouraged 20 days off per year
$2000 annual counseling benefit
RRSP matching and RESP contribution
Clioversary recognition program with special acknowledgement at 3, 5, 7, and 10 years

Fulltime

Senior Detection Engineer

This is a detection engineering role that leverages knowledge of monitoring, ana...

Location

Singapore , Singapore

Salary:

Not provided

Marriott Bonvoy

Expiration Date

Until further notice

Requirements

Bachelor’s degree in Computer Sciences or related field or equivalent experience/certification
3+ years of collective experience in Splunk SIEM (Splunk Enterprise Security) threat detection use case development or UEBA (Exabeam) use case development for insider threat use case development
5+ years of experience in security functions such as SOC, CIRT, security engineering, risk management, vulnerability management or technical infrastructure operations, administration, or systems engineering
scripting or programming language, including Python
Current information security certification such as Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP) preferred
offensive and defensive security certifications such as CEH, IGAC Cyber Defense, OSCP or other related certifications preferred
Splunk Certification, including Splunk Enterprise Security Certified Admin preferred
use case development experience on the Exabeam platform preferred
working knowledge of the NIST Cyber Security Framework and ISO/IEC 27001:2022 preferred
working knowledge of the MITRE ATT&CK Framework preferred

Job Responsibility

Lead collaboration sessions within the cyber security tower and other business units to devise security monitoring use cases
engage and collaborate with other security engineers and architects as needed to keep pace with the evolution of corporate infrastructure and applications and share that knowledge with peers as appropriate
document prospective security monitoring use cases with MITRE ATT&ACK mappings using standard templates and methodologies
inform and consult other cyber ops teams of required data onboarding and integrations for use case development
develop analytics, correlation searches, dashboards, reports and alerts within the SIEM and UEBA platforms
solicit feedback for pre-production security monitoring content through peer review process and user acceptance testing for tuning
document developed security monitoring content in a documentation registry using department standard templates and methodologies
manage field mapping and transmission of security monitoring alerts to the security incident response platform for SOC analyst consumption as outlined in process documentation
provide governance support for the content development function entailing content development standards compliance, change management approvals for SIEM or UEBA content, and lifecycle management of developed security monitoring content
service operational requests in queue such as analytics content performance tuning, filtering, search refinement, parsing issues

Fulltime

Senior Product Manager – Threat Detection

As a Product Manager – Threat Detection, you will be responsible for driving the...

Location

United States

Salary:

182000.00 - 219000.00 USD / Year

Corelight

Expiration Date

Until further notice

Requirements

2+ years in a technical support, engineering, or security research role
3+ years in networking in a product or practitioner role
5+ years overall experience in cybersecurity, with a focus on network security and threat detection
Strong understanding of network protocols, network security principles, and intrusion detection methodologies
Experience with Zeek (Bro) and its applications within NDR and security operations
Experience with network forensics, packet analysis, and network-based anomaly detection
Strong analytical skills, with the ability to interpret and apply threat intelligence and attack frameworks (e.g., MITRE ATT&CK)
Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, or equivalent experience

Job Responsibility

Develop and maintain a cutting edge detection engineering program via collaboration with Corelight Labs Research
Execute the product strategy for Corelight’s threat detection capabilities
Research adversary tactics, emerging network threats, and novel detection methodologies to improve the effectiveness of Corelight’s NDR solutions
Work closely with threat researchers, SOC analysts, and detection engineers to develop high-fidelity detection logic and optimize network threat intelligence
Analyze network protocols and traffic patterns to identify new ways to extract valuable security-relevant insights
Collaborate with engineering, UX, and security research teams to develop new features and improve the usability of Corelight’s threat detection tools
Contribute to open-source security initiatives, representing Corelight in the broader security community and helping drive innovation
Act as a technical liaison between customers, security teams, and internal stakeholders to ensure Corelight remains the gold standard for network evidence collection
Define, prioritize, and refine product requirements for threat detection capabilities, integrations, and intelligence applications
Develop detection content, documentation, and best practices for leveraging Corelight’s platform in threat hunting and incident response workflows

What we offer

Equity
Additional benefits
Collaborative, inclusive, and growth-oriented culture
AI-assisted workflows
Machine learning models
Cloud security and SaaS-based solutions
Geographically distributed yet connected employee base

Fulltime

New

Senior Backend Engineer-Detection Team

Cortex is expanding. We have the pace of a startup and the resources of the worl...

Location

Israel , Tel Aviv

Salary:

Not provided

Palo Alto Networks

Expiration Date

Until further notice

Requirements

5+ years experience as an hand-on software development engineer
5+ years of experience in designing, building and maintaining scalable cloud server-side applications
Experience with SQL or at least 1 leading RDBMS
Experience with Kubernetes/Docker

Job Responsibility

Develop a product that will apply the power of the Cortex Platform to solve the challenges of cloud security, with a focus on Data Analytics and Threat Detection
Apply your knowledge and experience of cloud development and cybersecurity to design and build and integrate new capabilities into our platform

What we offer

FLEXBenefits wellbeing spending account with over 1,000 eligible items
mental and financial health resources
personalized learning opportunities

Senior Systems Engineer

ExoAnalytic Solutions is looking for an exceptionally talented Senior Systems En...

Location

United States , El Segundo

Salary:

118000.00 - 212000.00 USD / Year

ExoAnalytic Solutions

Expiration Date

Until further notice

Requirements

Bachelor’s Degree in Engineering, Physics, Math, Computer Science, or other related field of study
5-15 years experience
United States citizenship required
An existing TS/SCI clearance is preferred
Willing to obtain a TS/SCI clearance or already have one

Job Responsibility

Modeling, simulation, and analysis in the areas of space domain awareness and space control
Analysis tasks can include determining the military utility of satellites, analyzing threats to those satellites, evaluating architectures of sensors to detect threats, countermeasures to defeat threats, and how best to enable operations of space control systems

What we offer

Company-paid medical, vision, and dental coverage
Access to a 401(k) Retirement Plan with a 6% contribution made by the company without requiring any match from the employee
Ample paid personal time off, including holidays
Short and long-term disability insurance
Life insurance
Various other discounts and perks
Flexible schedule
Structured freedom that allows employees to innovate

Fulltime

Senior Security Engineer

PagerDuty is seeking a Senior Security Engineer to join our diverse, customer-fo...

Location

Canada , Toronto

Salary:

137000.00 - 207000.00 CAD / Year

PagerDuty

Expiration Date

Until further notice

Requirements

Proficiency with Application & Product Security typically associated with 4 - 5 years of experience in a Security Engineering role working with a cloud-native, microservices environment, preferably AWS
Familiarity with cloud-native product technologies including: Vulnerability detection via multiple approaches including SAST, DAST, SCA, and runtime (e.g., Qualys/Nessus, Wiz, Snyk, GHAS, Semgrep, etc.)
CI/CD technologies and integrations (e.g., CircleCI, Buildkite, Helm, Terraform, Chef)
Product security event logging standards and analysis tools (e.g., SIEM such as: SumoLogic, LogRythm, or Splunk, etc.)
Security Incident Response & Risk Management processes and tools
Proficiency in at least one programming language and framework (e.g. Python, Bash, Phoenix/Elixir, Java, Ruby on Rails), typically associated with 3 - 4 years of experience with the language/framework
Have exceptional written, oral communication, and interpersonal skills
Organizational skills with the ability to successfully manage multiple priorities and deadlines

Job Responsibility

Embrace the role of hands-on technical lead in defining product security standards and guiding platform protections
Establish criteria and conduct comprehensive security reviews throughout all stages of product development to identify and address security risks
Perform regular threat assessments, coordinate with third-party testers for penetration testing, and conduct internal penetration testing to identify and mitigate security risks
Mentor and guide team members to ensure product and business objectives are prioritized in project implementations, fostering a strong documentation culture with project charters and design documents
Work with loosely defined requirements where you exercise your analytical skills to clarify questions, share your approach, and collaborate with the team to design and implement effective security frameworks. Maintain a strong appetite for challenging problems with a high degree of ownership
Participate in the team’s On-Call rotation, triaging and addressing security issues as they arise, and implement measures to prevent future occurrences
Enable service team security implementations by developing security-as-code constructs, including infrastructure-as-code (IaC) modules, libraries and frontend components, while creating and maintaining developer-focused documentation to promote easy adoption
Establish and uphold baseline standards and hardened configurations for platform components
Continuously enhance security frameworks by focusing on product security standards and software supply chain protections, tailored for application security in cloud-native, microservices environments

What we offer

Competitive salary
Comprehensive benefits package from day one
Flexible work arrangements
Company equity
ESPP (Employee Stock Purchase Program)
Retirement or pension plan
Generous paid vacation time
Paid holidays and sick leave
Dutonian Wellness Days & HibernationDuty - companywide paid days off in addition to PTO
Paid parental leave: 22 weeks for pregnant parent, 12 weeks for non-pregnant parent (some countries have longer leave standards and we comply with local laws)

Fulltime

Senior Security Engineer

The Senior Security Engineer will provide hands-on technical leadership within t...

Location

United Kingdom , Leeds; Thame

Salary:

65000.00 - 75000.00 GBP / Year

PEXA UK

Expiration Date

Until further notice

Requirements

Proactive, can-do attitude to get things done quickly and efficiently
Strong collaboration and communication skills
Willingness to contribute ideas to the security programme
Demonstratable first-hand experience in achieving organisational adherence to security best practices
Experience in the practical protection of a remote working laptop estate and SaaS cloud solutions
Experience in identity and access management solutions
Experience in device business automation and updates
Experience in the security aspects of cloud web application hosting and defence measures like WAF

Job Responsibility

Maintenance and Operational Security: Ensure all security solutions remain operationally effective
Ensure technical teams timely patch applications, systems, software, and hardware
Maintain and audit secure configurations for devices, applications, and cloud environments
Access Control and Identity Management: Conduct regular user and privileged account reviews
Manage and monitor Privileged Identity Management (PIM) profiles and elevated access accounts
Coordinate with IT and HR for onboarding/offboarding
Tool, Infrastructure, and Encryption Management: Maintain and optimise security infrastructure and tools
Oversee encryption key and certificate management
Work with vendors and internal teams to ensure tools remain current
VPN, Network & Firewall Security: Design, configure, and maintain secure VPN and Zero-Trust network solutions

What we offer

Your growth: We encourage you to hit your personal and professional learning and development goals with our tailored programs and tools
Your wellness: We care about your holistic wellbeing
Your work/life blend: We want to help you create your ideal work/life blend

Fulltime

New

Senior Cybersecurity Analyst, Threat Hunter

Our cybersecurity and information security teams at IDEXX contribute to a more r...

Location

United States , Westbrook, Maine

Salary:

120000.00 - 140000.00 USD / Year

IDEXX

Expiration Date

Until further notice

Requirements

6–10 years of experience in cybersecurity roles
Minimum of 3 years dedicated specifically to threat hunting or advanced incident response
Bachelor’s degree in computer science, Cybersecurity, Information Technology, or a related field
Preferred certifications GCIH (GIAC Certified Incident Handler) and CompTIA CySA+ (Cybersecurity Analyst+) certification
Proven, hands-on experience using platform for EDR (Endpoint Detection and Response) and threat hunting
Expert-level knowledge of PowerShell Scripting, Python and EDR and SIEM query language is preferred
Deep understanding of incident response lifecycles, methodologies, and forensic techniques
Strong knowledge of networking protocols, operating systems (Windows, Linux, macOS), and common attack vectors
Familiarity with scripting languages (e.g., Python, PowerShell) for automation of hunting tasks is a plus
Exceptional analytical and problem-solving skills with keen attention to detail

Job Responsibility

Proactively hunt for indicators of compromise (IOCs) and advanced persistent threats (APTs) across the network, endpoints, and cloud environments using threat intelligence and a hypothesis-driven methodology
Conduct in-depth analysis of security events, network traffic, and endpoint data to identify malicious activity and potential breaches
Utilize the SIEM and EDR platform extensively, applying expert knowledge of the scripting, SIEM and EDR query language to perform complex searches and data analysis
Lead and participate in incident response activities, including containment, eradication, and recovery efforts, serving as a primary escalation point for critical security incidents
Develop and refine threat hunting playbooks, procedures, and detection rules to improve the security team’s efficiency and effectiveness
Collaborate with the security engineering and security operations center (SOC) teams to integrate new threat intelligence and enhance existing security tools and controls
Mentor junior analysts and contribute to the ongoing improvement of the organization's overall security posture

What we offer

Opportunity for annual cash bonus
Health / Dental / Vision Benefits Day-One
5% matching 401k
Additional benefits including but not limited to financial support, pet insurance, mental health resources, volunteer paid days off, employee stock program, foundation donation matching

Fulltime

Senior Threat Detection Engineer

Atlassian

Location:
United States , San Francisco

Category:
IT - Software Development

Contract Type:
Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Additional Information:

Job Posted:
April 23, 2025

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Senior Threat Detection Engineer

Senior Logging & Detection Engineer

Senior Detection Engineer

Senior Product Manager – Threat Detection

Senior Backend Engineer-Detection Team

Senior Systems Engineer

Senior Security Engineer

Senior Security Engineer

Senior Cybersecurity Analyst, Threat Hunter

Senior Threat Detection Engineer

Atlassian

Location:United States , San Francisco

Category:IT - Software Development

Contract Type:Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Additional Information:

Job Posted:April 23, 2025

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Senior Threat Detection Engineer

Senior Logging & Detection Engineer

Senior Detection Engineer

Senior Product Manager – Threat Detection

Senior Backend Engineer-Detection Team

Senior Systems Engineer

Senior Security Engineer

Senior Security Engineer

Senior Cybersecurity Analyst, Threat Hunter

Location:
United States , San Francisco

Category:
IT - Software Development

Contract Type:
Not provided

Job Posted:
April 23, 2025