Threat Detection Engineer Job at Atlassian (San Francisco)

Threat Detections Engineer II

We’re looking for a thoughtful and driven Threat Detection Engineer II to help s...

Location

United States , Austin

Salary:

Not provided

Clear

Expiration Date

Until further notice

Requirements

Building, tuning, and validating detections in SIEM or cloud-native environments
Strong understanding of networking, identity, endpoint telemetry, and modern attack techniques
Spotting patterns across network, endpoint, identity, and cloud data
Writing clear, scalable detection logic using rule languages, scripting, automation frameworks, and Detection-as-Code practices
Collaborating across security functions and communicating effectively
Staying curious, adaptable, and detail-oriented
Hands-on experience with tools such as Google Chronicle, YARA/YARA-L, BigQuery, SOAR platforms, and scripting languages like Python
3–5 years of experience in security operations or detection engineering
Familiarity with frameworks like MITRE ATT&CK and Sigma
Leveraging relevant certifications (e.g., CISSP, Sec+) when helpful, though not required

Job Responsibility

Design, implement, and tune custom detections that identify malicious or anomalous activity across a wide range of data sources
Translate threat intelligence, incident learnings, and emerging trends into high-impact detection logic
Partner closely with Threat Intelligence, Incident Response, Automation, and other security teams to operationalize new detections, refine response strategies, and improve overall signal fidelity
Continuously assess detection performance by analyzing false positives, coverage gaps, and visibility across critical assets
Support and expand automation efforts across the detection lifecycle—including development, validation, deployment, and routine maintenance
Document detection logic, workflows, and data sources clearly and consistently
Map detection coverage to frameworks like MITRE ATT&CK and contribute to reducing measurable gaps over time

What we offer

Meals and snacks in offices
Stipend and reimbursement programs for well-being and learning & development
Comprehensive healthcare plans
Family building benefits (fertility and adoption/surrogacy support)
Flexible time off
Free OneMedical memberships for you and your dependents
401(k) retirement plan with employer match
Restricted Stock Units

Fulltime

Senior Threat Detection Engineer

We’re expanding our Threat Detection Engineering team at Atlassian and looking f...

Location

United States , San Francisco

Salary:

146300.00 - 235000.00 USD / Year

Atlassian

Expiration Date

Until further notice

Requirements

Bachelor's degree in Computer Science, Information Security, or a related field
Minimum 3 years experience in Detection Engineering roles
Experience building advanced data analytics and ML based detection models to identify complex threats
Experience building effective detection capabilities to modern cloud environments
Experience using common programming languages to build automation
Experience identifying threats through proactive threat hunting
Experience using security detection technologies and systems, including firewalls, intrusion detection systems, EDR, and authentication systems
Experience successfully delivering complex projects
Strong analytical skills and the ability to effectively identify and resolve problems

Job Responsibility

Develop advanced threat detection mechanisms using complex data analytics and machine learning models that can effectively identify and raise alerts for any adversarial or high-risk behaviors within the Atlassian’s systems
Continuous improvement and fine-tuning of detection systems to effectively adapt to new and emerging cyber threats
Monitor and enhance critical detection systems to ensure their reliability and effectiveness in delivering robust detection capabilities
Deploy new detection technologies to continuously uplift and improve our detection capabilities
Collaborate with partner teams such as Incident Response and Threat Intelligence is to establish and maintain meaningful security alerts
Work closely with these teams to ensure security alerts are relevant, actionable, and aligned with the overall security strategy
Collaborate closely with Product Engineering, Data Platform, and Security Engineering teams to advance our detection coverage and tooling in our production cloud environments
Automate complex security operational tasks, aiming to streamline and optimize routine security activities
Develop tools, systems, and programs to enhance and fortify Atlassian's overall security posture
Remain informed about the latest security trends, emerging threats, and evolving technologies to ensure that Atlassian is well-prepared to adapt to new security challenges

What we offer

health and wellbeing resources
paid volunteer days

Fulltime

Senior Product Manager – Threat Detection

As a Product Manager – Threat Detection, you will be responsible for driving the...

Location

United States

Salary:

182000.00 - 219000.00 USD / Year

Corelight

Expiration Date

Until further notice

Requirements

2+ years in a technical support, engineering, or security research role
3+ years in networking in a product or practitioner role
5+ years overall experience in cybersecurity, with a focus on network security and threat detection
Strong understanding of network protocols, network security principles, and intrusion detection methodologies
Experience with Zeek (Bro) and its applications within NDR and security operations
Experience with network forensics, packet analysis, and network-based anomaly detection
Strong analytical skills, with the ability to interpret and apply threat intelligence and attack frameworks (e.g., MITRE ATT&CK)
Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, or equivalent experience

Job Responsibility

Develop and maintain a cutting edge detection engineering program via collaboration with Corelight Labs Research
Execute the product strategy for Corelight’s threat detection capabilities
Research adversary tactics, emerging network threats, and novel detection methodologies to improve the effectiveness of Corelight’s NDR solutions
Work closely with threat researchers, SOC analysts, and detection engineers to develop high-fidelity detection logic and optimize network threat intelligence
Analyze network protocols and traffic patterns to identify new ways to extract valuable security-relevant insights
Collaborate with engineering, UX, and security research teams to develop new features and improve the usability of Corelight’s threat detection tools
Contribute to open-source security initiatives, representing Corelight in the broader security community and helping drive innovation
Act as a technical liaison between customers, security teams, and internal stakeholders to ensure Corelight remains the gold standard for network evidence collection
Define, prioritize, and refine product requirements for threat detection capabilities, integrations, and intelligence applications
Develop detection content, documentation, and best practices for leveraging Corelight’s platform in threat hunting and incident response workflows

What we offer

Equity
Additional benefits
Collaborative, inclusive, and growth-oriented culture
AI-assisted workflows
Machine learning models
Cloud security and SaaS-based solutions
Geographically distributed yet connected employee base

Fulltime

Senior Detection Engineer

This is a detection engineering role that leverages knowledge of monitoring, ana...

Location

Singapore , Singapore

Salary:

Not provided

Marriott Bonvoy

Expiration Date

Until further notice

Requirements

Bachelor’s degree in Computer Sciences or related field or equivalent experience/certification
3+ years of collective experience in Splunk SIEM (Splunk Enterprise Security) threat detection use case development or UEBA (Exabeam) use case development for insider threat use case development
5+ years of experience in security functions such as SOC, CIRT, security engineering, risk management, vulnerability management or technical infrastructure operations, administration, or systems engineering
scripting or programming language, including Python
Current information security certification such as Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP) preferred
offensive and defensive security certifications such as CEH, IGAC Cyber Defense, OSCP or other related certifications preferred
Splunk Certification, including Splunk Enterprise Security Certified Admin preferred
use case development experience on the Exabeam platform preferred
working knowledge of the NIST Cyber Security Framework and ISO/IEC 27001:2022 preferred
working knowledge of the MITRE ATT&CK Framework preferred

Job Responsibility

Lead collaboration sessions within the cyber security tower and other business units to devise security monitoring use cases
engage and collaborate with other security engineers and architects as needed to keep pace with the evolution of corporate infrastructure and applications and share that knowledge with peers as appropriate
document prospective security monitoring use cases with MITRE ATT&ACK mappings using standard templates and methodologies
inform and consult other cyber ops teams of required data onboarding and integrations for use case development
develop analytics, correlation searches, dashboards, reports and alerts within the SIEM and UEBA platforms
solicit feedback for pre-production security monitoring content through peer review process and user acceptance testing for tuning
document developed security monitoring content in a documentation registry using department standard templates and methodologies
manage field mapping and transmission of security monitoring alerts to the security incident response platform for SOC analyst consumption as outlined in process documentation
provide governance support for the content development function entailing content development standards compliance, change management approvals for SIEM or UEBA content, and lifecycle management of developed security monitoring content
service operational requests in queue such as analytics content performance tuning, filtering, search refinement, parsing issues

Fulltime

New

Senior Logging & Detection Engineer

We are currently seeking a Senior Logging & Detection Engineer to lead the techn...

Location

Canada , Vancouver; Calgary; Toronto

Salary:

146200.00 - 197800.00 CAD / Year

Clio

Expiration Date

Until further notice

Requirements

Senior-level expertise building and scaling enterprise-grade detection capabilities and security monitoring systems
Expert-level query language proficiency in at least two of the following: Elasticsearch/Lucene, SQL, KQL (Kusto), or SPL (Splunk), demonstrating advanced optimization techniques
Extensive Detection Engineering experience owning the full lifecycle of rules, alerts, and automated response workflows within a SIEM/SOAR environment
Advanced log analysis skills across diverse, large-scale data sources, including multi-cloud logs (AWS, Azure, GCP), network flows, and advanced security tool outputs
Deep dashboard and visualization expertise with tools like Kibana, Grafana, or Tableau, specifically for security metrics and executive reporting
Proven expertise in leading threat hunting efforts using log data to proactively identify and track sophisticated threats and anomalous behavior across the environment
Senior-level scripting and automation abilities (Python/Go/PowerShell), used to build custom tools, manage APIs, and drive detection automation at scale
Architectural experience integrating and optimizing SIEM platforms, SOAR tools, and security orchestration systems
Expert performance optimization skills covering query tuning, index design, data partitioning, and overall resource-efficient analytics on big data
Significant incident response experience providing expert-level technical analysis and forensic support during major security incidents

Job Responsibility

Lead the design and implementation of sophisticated, production-ready detection rules and queries across the ELK stack, security data lakes, and multi-cloud logging platforms
Architect and optimize complex search queries, aggregations, and analytics dashboards for high-velocity security monitoring, focusing on performance and cost efficiency
Design and build automated detection and response workflows (SOAR), ensuring seamless and reliable integration with critical incident response systems
Serve as the primary liaison with the threat intelligence team, developing and owning the framework to translate intelligence into scalable, actionable detection capabilities (e.g., MITRE ATT&CK coverage)
Establish and maintain a robust detection rule library, query templates, and lead the creation of security analytics playbooks for the wider team
Drive performance optimization and resource utilization strategies across petabyte-scale log datasets, including index design and data tiering
Develop and standardize custom visualizations, dashboards, and executive reporting capabilities for security stakeholders
Lead complex threat hunting operations, mentor junior team members on investigative techniques, and proactively refine detection logic to achieve near-zero false positive rates
Collaborate closely with the platform team to define the logging architecture roadmap based on future detection requirements and security observability goals
Proactively research emerging threats and attack patterns, translating novel techniques into strategic, forward-looking detection logic and advising security leadership

What we offer

Top-tier health benefits, dental, and vision insurance
Hybrid work environment
Flexible time off policy, with an encouraged 20 days off per year
$2000 annual counseling benefit
RRSP matching and RESP contribution
Clioversary recognition program with special acknowledgement at 3, 5, 7, and 10 years

Fulltime

Principal Detection Engineer

We are seeking a highly skilled Principal Cyber Detection Engineer to join our t...

Location

United States , Spring

Salary:

117500.00 - 270000.00 USD / Year

Hewlett Packard Enterprise

Expiration Date

Until further notice

Requirements

Bachelor’s or master’s degree in computer science, cybersecurity, data science, or related engineering field
Certifications such as CISSP, CISM, CEH or OSCP preferred
Proven experience (8+ years) in cybersecurity, with a focus on threat detection and response
Deep understanding of cybersecurity frameworks and concepts, including attack vectors, threat landscapes, and defense mechanisms
Familiarity with SIEM/SOAR/ and EDR/XDR platforms
Strong expertise in Machine Learning (ML) and Artificial Intelligence (AI), including model design, training, and deployment
Knowledge of adversarial machine learning and techniques for defending against model exploitation
Experience with anomaly detection, behavioral modeling, and predictive analytics in cybersecurity contexts
Experience with deep learning architectures or natural language processing (NLP) applied to cybersecurity
Experience integrating machine learning models into security operations workflows in enterprise environments

Job Responsibility

Design, develop, and implement advanced threat detection systems leveraging ML/AI techniques to identify malicious activity, anomalies, and emerging risks
Build and optimize machine learning models for real-time detection, including supervised, unsupervised, and reinforcement learning approaches
Data engineering and pre-processing for cybersecurity applications
Analyze large-scale datasets to extract meaningful insights, detect patterns, and enhance the accuracy of detection systems
Develop and refine detection algorithms for intrusion detection, anomaly detection, endpoint security, behavioral analysis, and other cybersecurity applications
Automate detection workflows and processes to improve efficiency and scalability of security monitoring systems
Work closely with threat intelligence, red team, security operations, and data scientists to integrate detection models into security platforms and tools
Test, validate, and monitor the performance of detection models, ensuring reliability and minimizing false positives/negatives
Stay up to date with emerging threats, ML/AI technologies, and advancements in cybersecurity to continuously improve detection systems
Maintain clear documentation of models, processes, and methodologies for knowledge sharing across teams

What we offer

Comprehensive suite of benefits that supports physical, financial and emotional wellbeing
Programs catered to helping you reach career goals
Flexibility to manage work and personal needs

Fulltime

New

Senior Backend Engineer-Detection Team

Cortex is expanding. We have the pace of a startup and the resources of the worl...

Location

Israel , Tel Aviv

Salary:

Not provided

Palo Alto Networks

Expiration Date

Until further notice

Requirements

5+ years experience as an hand-on software development engineer
5+ years of experience in designing, building and maintaining scalable cloud server-side applications
Experience with SQL or at least 1 leading RDBMS
Experience with Kubernetes/Docker

Job Responsibility

Develop a product that will apply the power of the Cortex Platform to solve the challenges of cloud security, with a focus on Data Analytics and Threat Detection
Apply your knowledge and experience of cloud development and cybersecurity to design and build and integrate new capabilities into our platform

What we offer

FLEXBenefits wellbeing spending account with over 1,000 eligible items
mental and financial health resources
personalized learning opportunities

New

Analyst, Security Preventative & Threat Engineer

We’re seeking a Preventative & Threat Engineer to proactively prevent, detect, a...

Location

Bulgaria , Sofia

Salary:

Not provided

European Bank for Reconstruction and Development

Expiration Date

January 12, 2026

Requirements

Experience with SIEM and SOAR tools
An understanding of core security fundamentals and concepts
Can proactively identify and address security issues
Familiar with cloud security concepts and best practices, as well as the security features and capabilities of major cloud platforms such as AWS, Azure, and GCP
Familiar with security automation tools and techniques
Ability to analyse large data sets and identify anomalies
Ability to quickly create and deploy countermeasures under pressure
Ability to create complex scripts, develop tools, or automate processes in Python or other relevant command languages

Job Responsibility

Assists to proactively prevent, detect and respond to Cyber Security incidents to reduce risk
Assists with hypothesing new threats and indicators of compromise
Contributes to forming conclusions that may challenge conventional wisdom
Works with the Associate to Identify new and dynamic ways to protect the organisation against the evolving threat landscape
Supports the monitoring of threat intelligence feeds to identify a range of threats, including indicators of compromise and advanced persistent threats (APTs)
Supports the identification of the tactics, techniques and procedures (TTPs) of potential threats through the MITRE ATT&CK or similar frameworks
Understand and support the use of the Threat Hunting Maturity Model and Threat Hunt Process during investigations
Assists with conducting threat assessments to identify what threats are most likely to target this business, and how they would execute their attacks
Support the capture of attacker techniques, indicators of compromise and objectives, and use the captured information to improve defences through recommendations for the creation of detection logic
Provides support and cover to the Incident Response specialism where required

What we offer

Varied, stimulating and engaging work
A working culture that embraces inclusion and celebrates diversity
Hybrid and flexible working arrangements
An environment that places sustainability, equality and digital transformation at the heart of what we do
A workplace that prioritises employee wellbeing and provides a comprehensive suite of competitive benefits

Fulltime

Threat Detection Engineer

Atlassian

Location:
United States , San Francisco

Category:
IT - Software Development

Contract Type:
Employment contract

Salary:

Job Description:

Job Responsibility:

Requirements:

Additional Information:

Job Posted:
March 19, 2025

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Threat Detection Engineer

Threat Detections Engineer II

Senior Threat Detection Engineer

Senior Product Manager – Threat Detection

Senior Detection Engineer

Senior Logging & Detection Engineer

Principal Detection Engineer

Senior Backend Engineer-Detection Team

Analyst, Security Preventative & Threat Engineer

Threat Detection Engineer

Atlassian

Location:United States , San Francisco

Category:IT - Software Development

Contract Type:Employment contract

Salary:

Job Description:

Job Responsibility:

Requirements:

Additional Information:

Job Posted:March 19, 2025

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Threat Detection Engineer

Threat Detections Engineer II

Senior Threat Detection Engineer

Senior Product Manager – Threat Detection

Senior Detection Engineer

Senior Logging & Detection Engineer

Principal Detection Engineer

Senior Backend Engineer-Detection Team

Analyst, Security Preventative & Threat Engineer

Location:
United States , San Francisco

Category:
IT - Software Development

Contract Type:
Employment contract

Job Posted:
March 19, 2025