131 detection engineer jobs at 94 companies in Tiburon, CA
1mo
Save
Mark Applied
Hide
Staff Detection Engineer
New York or San Francisco or Austin or Seattle or United States
$269k-$330k/yr OnsiteFull Time
8+ YOE8+ years in security operations/detection engineering or incident response; experience building detection engineering programs, cloud and endpoint telemetry detections, Python automation, incident response leadership, and detection-as-code pipelines.
AWS, GCP, Azure, Python, EDR, Sigma
2w
Save
Mark Applied
Hide
Staff Detection & Response Engineer
Boston or New York City or Los Angeles or San Francisco
$230k-$330k/yr OnsiteFull Time
6+ YOE6+ years in detection and response, strong AWS-native detection experience, detection-as-code mindset, incident response ownership, and interest in detecting AI/ML abuse.
AWS, CloudTrail, GuardDuty, VPC/flow logs
3d
Save
Mark Applied
Hide
Senior Detection Engineer
United States or San Francisco or Illinois or Colorado or New York City
$160k-$235k/yr RemoteFull Time
7+ YOERequires 7+ years in secure coding, alert development, and detection engineering; detection-as-code pipelines; automation; cloud systems; SIEM querying; Python or Go; and cross-functional security collaboration. Snowflake, Cortex, and Google SecOps preferred.
SQL, SPL, KQL, Python, Go, Snowflake, Cortex, Google SecOps, MITRE ATT&CK, D3FEND, SIEM
3w
Save
Mark Applied
Hide
Staff Security Detection Engineer, Machine Learning
Seattle or San Francisco
$144k-$248k/yr OnsiteFull Time
7+ YOE7+ years building and operating ML detection/anomaly models in production, strong Python and SQL skills, experience with data lake big-data tech and security telemetry, bachelor’s degree or equivalent.
Snowflake, Databricks, Spark, Delta, Iceberg, S3, GCS, Python, SQL, pandas, scikit-learn, PyTorch, TensorFlow, Kafka, Kinesis, Pub/Sub, Flink, SageMaker, Glue, Athena, Lambda
1mo
Save
Mark Applied
Hide
Threat Detection Engineer – Security Operations
Mountain View, California, United States
$113k-$140k/yr OnsiteFull Time
2+ YOE2+ years security engineering/ops experience; proficiency with Splunk/Elastic/Chronicle/Logstash, Python and SQL, YARA-L/Sigma detection formats, LLM APIs/AI literacy, cloud-scale log management, MITRE ATT&CK, and IaC (Terraform/Git).
Splunk, Elastic Stack, Logstash, Google Chronicle (SecOps), Python, SQL, YARA-L, Sigma, Kusto, Lucene, LLM APIs, OpenAI, Anthropic, Google Gemini, Snowflake, Terraform, GitHub, GitLab CI/CD, LangChain, LlamaIndex, SOAR, SIEM
2mo
Save
Mark Applied
Hide
Security Engineer, Detection and Response
San Francisco, California, United States
$200k-$325k/yr OnsiteFull Time
10+ YOE10+ years in cybersecurity with deep expertise in detection engineering, incident response, security operations, observability, and team leadership; experience with SIEM/EDR/cloud telemetry and driving detection strategies.
SIEM, data lakes, EDR, observability stacks, cloud telemetry, logging
1mo
Save
Mark Applied
Hide
Principal Detection and Response Engineer
San Mateo, California, United States
$295k-$345k/yr HybridFull Time
8+ YOE8+ years in detection/response, security data engineering, incident response; experience building streaming ETL pipelines; proficiency with SIEM/EDR/NDR/SOAR and languages like C, Golang, or Java.
Kafka, PubSub, Spark, Flink, Athena, BigQuery, C, Golang, Java, SIEM, EDR, NDR, SOAR
2mo
Save
Mark Applied
Hide
Senior Detection and Response Engineer
San Carlos, California, United States
$180k-$235k/yr OnsiteFull Time
5+ YOE5+ years in detection engineering/incident response; experience with SIEM, EDR, logging pipelines, cloud monitoring (AWS/GCP/Azure); strong scripting in Python/Go/Bash; Bachelor's in a technical field required.
SIEM, EDR, Python, Go, Bash, Kubernetes, MITRE ATT&CK, AWS, GCP, Azure
1mo
Save
Mark Applied
Hide
Engineer II, Threat Detection - Windows (Hybrid)
Sunnyvale or New York City or Austin or Redmond
$100k-$145k/yr HybridFull Time
4+ YOEAbility to analyze malware and intrusion telemetry, author behavioral detections for Windows endpoints, use Python/PowerShell for automation, and collaborate with threat intelligence; U.S. citizenship or green card required for CJIS eligibility.
PowerShell, Python, EDR, Regular expressions, MITRE ATT&CK
3w
Save
Mark Applied
Hide
Security engineer, detection and response
San Francisco or Seattle or New York City
$132k-$258k/yr HybridFull Time
3+ YOE3+ years in security operations, detection engineering, or incident response; experience securing AI/ML or distributed HPC infrastructure; strong programming and forensic skills; SIEM and detection experience.
Python, KQL, SPL, SIEM
1w
Save
Mark Applied
Hide
Network Threat Detection R&D Engineer
Palo Alto, California, United States
$144k-$230k/yr OnsiteFull Time
12+ YOEBachelor's and 12+ years, master's and 10+ years, or PhD and 7+ years; network security and IDS signature experience; Python, Docker, Kubernetes, AI systems, communication, and U.S. work authorization required.
Python, Docker, Kubernetes
1w
Save
Mark Applied
Hide
Senior Manager, Detection Response
San Francisco, California, United States
$270k-$290k/yr HybridFull Time
Requires experience building or scaling detection engineering or security operations programs, incident command, threat intelligence, detection strategy, security vendors, automation or AI/ML, and executive communication.
AI, AI/ML
2mo
Save
Mark Applied
Hide
Security Engineer, Detection and Response
San Francisco or New York
$230k-$260k/yr OnsiteFull Time
6+ YOE6+ years in detection engineering/security operations/incident response; built and operated production detections; fluent in detection languages (Sigma, KQL, SPL, YARA-L, EQL, Panther); cloud security (AWS/GCP/Azure); hands-on with SIEM, EDR, SOAR; on-call experience.
Sigma, KQL, SPL, YARA-L, EQL, Panther, AWS, GCP, Azure, SIEM, EDR, SOAR, LLM, Kubernetes
1mo
Save
Mark Applied
Hide
Security Engineer, Detection Response
San Francisco or New York City or London or Berlin or Remote
$208k-$312k/yr HybridFull Time
Extensive security operations experience with SIEM, logging, detection engineering, incident response, AWS, GitHub, SQL, scripting (Python/Bash) and compiled languages (Rust/Go).
SIEM, AWS, GitHub, SQL, Python, Bash, Rust, Go, EDR
1mo
Save
Mark Applied
Hide
Member of Technical Staff, SecOps & Threat Detection Engineer
San Francisco, California, United States
$265k-$310k/yr OnsiteFull Time
6+ YOE6+ years in security/SRE/infrastructure with security focus; experience building detection, SIEM, EDR (SentinelOne), cloud (AWS), scripting (Python/Go), and strong incident detection and response skills.
LenelS2, Brivo, Genetec, Honeywell, Cisco Meraki, Okta, Microsoft Azure, Microsoft Teams, Slack, ServiceNow, DocuSign, Avigilon Alta, Descartes Visual Compliance, SentinelOne, SIEM, AWS, Python, Go
5d
Save
Mark Applied
Hide
Threat Detection and Response Engineer
San Francisco or New York City or Los Angeles or Seattle or United Kingdom or Ireland or Poland or Germany or Australia
$175k-$260k/yr RemoteFull Time
5+ YOE5+ years in cyber incident response or a related security field; bachelor's degree or equivalent; experience with SOAR, EDR, NDR, SIEM, AWS, and GCP; strong incident documentation and communication skills.
SOAR, Tines, EDR, NDR, SIEM, Chronicle, AWS, GCP
1mo
Save
Mark Applied
Hide
Staff Security Engineer - Detection and Response
Reno or San Ramon
$205k-$256k/yr OnsiteFull Time
8+ YOE8+ years in detection, security operations, incident response, or software engineering; proficiency with Python or similar; experience building AI/LLM-driven detection and response; AWS and infra-as-code experience.
Python, Kotlin, TypeScript, MITRE ATT&CK, CloudTrail, VPC Flow Logs, GuardDuty, CloudWatch, Athena, Lambda, ECS, EKS, Terraform, CI/CD, LLM
3d
Save
Mark Applied
Hide
Confluent - Staff Security Engineer I - Detection & Response
Poughkeepsie or Lowell or Rochester or Tucson or Research Triangle Park or Armonk or Boston or Bellevue or Atlanta or San Jose or Dallas or Austin or San Francisco or Seattle
$161k-$299k/yr RemoteFull Time
8+ YOERequires a bachelor's degree and 8+ years in detection and response or security engineering, with expertise in cloud security, detection engineering, incident response, Python or Golang, and SIEM solutions.
Python, Golang, Kubernetes, AWS, GCP, Azure, SIEM, SOAR, ETL, IBM Cloud
1mo
Save
Mark Applied
Hide
Security Engineer, Detection & Response - Global Security Organization
San Jose, California, United States
$156k-$317k/yr OnsiteFull Time
Strong security fundamentals across networks/hosts/apps/containers; experience with WAF/HIDS/NTA/EDR/DLP; coding for log analysis and detection-as-code; threat modeling, incident analysis, and ML/AI for security.
WAF, HIDS, NTA, EDR, DLP, MITRE ATT&CK, NIST CSF, Python, numpy, pandas, sklearn, Detection-as-Code
1mo
Save
Mark Applied
Hide
Security Software Engineer II, Detection and Response
San Francisco or United States
$124k-$255k/yr RemoteFull Time
Experience in intrusion detection and incident response in cloud environments; SIEM query writing, telemetry analysis (EDR, osquery, firewall logs), scripting (Python/Go/Ruby), networking fundamentals, and OS internals (macOS/Linux/Windows).
SIEM, EDR, Osquery, Python, Go, Ruby, MacOS, Linux, Windows, TCP/IP
Explore Jobs