Job description

About the Role We are looking for a Senior Security Engineer to join a front-line Threat Detection and Response team. The team detects, investigates, and responds to internal and external security threats. You will help shape and carry out the team’s detection and incident response strategy. You will build automation that scales, mentor teammates, and work with partners across the organization to remove whole categories of security risk. Key Responsibilities • Investigate security incidents using digital forensics and data analysis. • Proactively hunt for threats and unusual activity across corporate and production environments. • Build automation and detection models that identify unusual activity and speed up response at scale. • Work with engineering teams to design and deliver advanced detection solutions. • Find visibility gaps in infrastructure and work with partners to close them through better logging and detection. • Lead complex investigations alongside cross-functional partners, including Legal, Privacy, and Engineering. • Use lessons from incidents and root cause analysis to drive lasting security improvements. • Mentor team members and help define the team’s detection and response processes. Qualifications Required • 5+ years of hands-on experience in security operations, including one or more of the following: investigations, incident response, incident management, digital forensics, threat intelligence, threat hunting, or detection engineering. • Proficiency in Python or another scripting language. Experience with SQL and Pandas is a plus. • Experience automating security detection and response. • Working knowledge of the Cyber Kill Chain and MITRE ATT&CK frameworks and how they apply to the current threat landscape. • Ability to lead through influence in complex, ambiguous situations. • Ability to stay calm, collaborative, and decisive in high-pressure situations. • Strong organization, prioritization, and multitasking skills. • A self-motivated, creative problem-solver who works well independently. Preferred • Familiarity with Elasticsearch. • Experience with AWS services such as EC2, S3, Lambda, and RDS. Key Details • Start Date: November 17, 2026 • Duration: 12 months • Location: Remote (within the U.S.) • Work Schedule: Full-time, 40 hours per week (Monday-Friday) • Pay Rate: $120-$137/hour + benefits • Work Authorization: Must be authorized to work in the U.S. without sponsorship. • Engagement: W-2 Contract

Requirements

Must-haves

Investigate security incidents using digital forensics and data analysis.
Proactively hunt for threats and unusual activity across corporate and production environments.
Build automation and detection models that identify unusual activity and speed up response at scale.
Work with engineering teams to design and deliver advanced detection solutions.
Find visibility gaps in infrastructure and work with partners to close them through better logging and detection.
Lead complex investigations alongside cross-functional partners, including Legal, Privacy, and Engineering.
Use lessons from incidents and root cause analysis to drive lasting security improvements.
Mentor team members and help define the team’s detection and response processes.
Experience automating security detection and response.
Working knowledge of the Cyber Kill Chain and MITRE ATT&CK frameworks and how they apply to the current threat landscape.
Ability to lead through influence in complex, ambiguous situations.
Ability to stay calm, collaborative, and decisive in high-pressure situations.
Strong organization, prioritization, and multitasking skills.
A self-motivated, creative problem-solver who works well independently.

Nice-to-haves

Proficiency in Python or another scripting language. Experience with SQL and Pandas is a plus.
Familiarity with Elasticsearch.
Experience with AWS services such as EC2, S3, Lambda, and RDS.
Start Date: November 17, 2026
Duration: 12 months
Location: Remote (within the U.S.)
Work Schedule: Full-time, 40 hours per week (Monday-Friday)
Pay Rate: $120-$137/hour + benefits
Work Authorization: Must be authorized to work in the U.S. without sponsorship.
Engagement: W-2 Contract

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

pythonsqlaws

Platform: breezy
Effort: medium