Senior security engineer, threat detection and response

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Security Engineer, Threat Detection and Response based in United States.

This role offers the opportunity to join a high-impact security team responsible for protecting large-scale technology platforms and global user communities. As a Senior Security Engineer, you will lead threat detection, incident response, and security investigations across corporate and production environments. You will help shape security capabilities by developing advanced detection strategies, automation, and response processes. The position combines hands-on technical work with strategic influence, allowing you to solve complex security challenges at scale. You will collaborate with engineering, legal, privacy, and business teams while mentoring peers and improving the organization’s security posture. This is an ideal opportunity for a security professional passionate about threat hunting, automation, and building resilient systems.

Accountabilities:

The Senior Security Engineer, Threat Detection and Response will be responsible for identifying, investigating, and mitigating security threats while helping build scalable detection and response capabilities. This role requires strong technical expertise, analytical thinking, and the ability to collaborate across teams to strengthen security operations.

• Conduct advanced security investigations using digital forensics, data analysis, and threat intelligence techniques.
• Hunt for malicious activity and emerging threats across corporate and production environments.
• Develop and improve detection models, automation workflows, and security response capabilities.
• Use programming and analytics skills to identify anomalies, investigate incidents, and improve security visibility.
• Build scalable solutions that enhance threat detection and reduce response time.
• Partner with engineering teams to design and implement advanced security monitoring and detection strategies.
• Identify infrastructure visibility gaps and collaborate with stakeholders to improve logging, telemetry, and security controls.
• Support incident response efforts by coordinating with cross-functional teams, including Legal, Privacy, and Engineering.
• Contribute to security strategy, operational improvements, and the evolution of threat detection practices.
• Mentor teammates and help improve technical capabilities across the security organization.

Requirements:

The ideal candidate has extensive experience in security operations, incident response, and threat detection engineering. They are comfortable working independently, solving complex problems, and operating effectively in fast-moving environments where security decisions have significant impact.

• 5+ years of hands-on experience in security operations, including incident response, investigations, digital forensics, threat hunting, detection engineering, or related disciplines.
• Strong programming skills with Python or another scripting language; experience with SQL and Pandas is highly valuable.
• Experience automating security detection and response processes.
• Solid understanding of cybersecurity frameworks such as the Cyber Kill Chain and MITRE ATT&CK.
• Ability to investigate complex security incidents and translate findings into actionable improvements.
• Experience working with security analytics, threat intelligence, and detection technologies.
• Strong problem-solving skills with the ability to work independently and manage ambiguous situations.
• Ability to remain calm, organized, and collaborative during high-pressure security incidents.
• Strong communication and stakeholder management skills with the ability to influence cross-functional teams.
• Familiarity with Elasticsearch is preferred.
• Experience with AWS services such as EC2, S3, Lambda, and RDS is a plus.

Benefits:

Competitive compensation of $140 - $160 per hour (W2).

Fully remote position for candidates based in the United States, with preference for PST time zone availability.

Full-time schedule of approximately 40 hours per week.

12-month contract with potential extension opportunities.

Opportunity to work on large-scale security challenges impacting millions of users.

Exposure to advanced threat detection, incident response, and security automation initiatives.

Collaborative environment with experienced security and engineering professionals.

Opportunity to contribute to the development of modern security capabilities and processes.