14 threat detection engineer jobs at 8 companies in Aptos, CA
1mo
Save
Mark Applied
Hide
Engineer II, Threat Detection - Windows (Hybrid)
Sunnyvale or New York City or Austin or Redmond
$100k-$145k/yr HybridFull Time
4+ YOEAbility to analyze malware and intrusion telemetry, author behavioral detections for Windows endpoints, use Python/PowerShell for automation, and collaborate with threat intelligence; U.S. citizenship or green card required for CJIS eligibility.
PowerShell, Python, EDR, Regular expressions, MITRE ATT&CK
1mo
Save
Mark Applied
Hide
Threat Detection Engineer – Security Operations
Mountain View, California, United States
$113k-$140k/yr OnsiteFull Time
2+ YOE2+ years security engineering/ops experience; proficiency with Splunk/Elastic/Chronicle/Logstash, Python and SQL, YARA-L/Sigma detection formats, LLM APIs/AI literacy, cloud-scale log management, MITRE ATT&CK, and IaC (Terraform/Git).
Splunk, Elastic Stack, Logstash, Google Chronicle (SecOps), Python, SQL, YARA-L, Sigma, Kusto, Lucene, LLM APIs, OpenAI, Anthropic, Google Gemini, Snowflake, Terraform, GitHub, GitLab CI/CD, LangChain, LlamaIndex, SOAR, SIEM
1mo
Save
Mark Applied
Hide
Security Operations Analyst – Detection Engineering & Threat Hunting
San Jose, California, United States
$112k-$236k/yr OnsiteFull Time
Experience in 24/7 security operations, SIEM/EDR proficiency, detection engineering and threat hunting, scripting for automation, and knowledge of attacker tactics and MITRE ATT&CK.
SIEM, Splunk, Chronicle, Elastic, EDR, SentinelOne, CrowdStrike, Sigma, EQL, KQL, YARA, SOAR, GitOps, CI/CD, Python, PowerShell, MITRE ATT&CK, MaGMa
1d
Save
Mark Applied
Hide
Security Operations Analyst - Detection Engineering & Threat Hunting, Global SOC
San Jose or Los Angeles or Singapore or New York City or London or Dublin or Paris or Berlin or Dubai or Jakarta or Seoul or Tokyo
$112k-$223k/yr OnsiteFull Time
4+ YOERequires 4+ years in security operations, incident response, detection engineering, or threat hunting; SIEM, EDR, detection logic, scripting, threat hunting, and telemetry investigation experience. Bachelor's degree and certifications preferred.
SIEM, Intrusion Detection and Prevention Systems (IDS/IPS), firewalls, Endpoint Detection and Response (EDR), Splunk, Chronicle, Elastic, SentinelOne, CrowdStrike, Sigma, EQL, KQL, YARA, Python, PowerShell, MITRE ATT&CK, MaGMa, SOAR, GitOps, CI/CD
1mo
Save
Mark Applied
Hide
Security Engineer, Detection & Response - Global Security Organization
San Jose, California, United States
$156k-$317k/yr OnsiteFull Time
Strong security fundamentals across networks/hosts/apps/containers; experience with WAF/HIDS/NTA/EDR/DLP; coding for log analysis and detection-as-code; threat modeling, incident analysis, and ML/AI for security.
WAF, HIDS, NTA, EDR, DLP, MITRE ATT&CK, NIST CSF, Python, numpy, pandas, sklearn, Detection-as-Code
2mo
Save
Mark Applied
Hide
Security Engineer, Level 5, Detection & Response
Los Angeles or Palo Alto or Santa Monica
$178k-$313k/yr OnsiteFull Time
6+ YOE6+ years security experience; BS in CS/Engineering; strong Python/Go; OS/cloud proficiency; incident response and threat hunting.
Python, Go, Kubernetes, AWS, Google Cloud Platform, macOS, Windows, Linux
2mo
Save
Mark Applied
Hide
Security Engineer, Level 5, Detection & Response
Los Angeles or Palo Alto or Santa Monica
$178k-$313k/yr HybridFull Time
6+ YOE6+ years in security fields; strong Python/Go; cloud and OS internals knowledge; threat hunting and incident response.
Python, Go, macOS, Windows, Linux, Kubernetes, AWS, Google Cloud Platform
6d
Save
Mark Applied
Hide
Security Researcher (Detection Systems)
Sunnyvale, California, United States
$150k-$250k/yr OnsiteFull Time
5+ YOE5+ years building large-scale threat analysis or detection solutions, or a relevant Ph.D.; expertise in threat hunting, malware, vulnerability analysis, reverse engineering, or offensive security; strong Python proficiency.
Python, C, C++, Rust, Go, MITRE ATT&CK, EDR, XDR, SOC, IDS, IPS, LLMs
1w
Save
Mark Applied
Hide
Security Engineer
Bellevue or Menlo Park or Washington or New York City
$271k-$347k/yr OnsiteFull Time
15+ YOE15+ years managing security risk; experience with distributed systems, access control, encryption, intrusion detection, system design, threat modeling, engineered controls, and communicating technical risk to senior leadership.
2w
Save
Mark Applied
Hide
Staff Security Software Engineer
Redwood City, California, United States
HybridFull Time
Hands-on experience building security foundations (identity, access, secrets, encryption), strong coding and systems skills, threat modeling, and incident detection/response in production environments.
2mo
Save
Mark Applied
Hide
Principal Product Manager - Threat Detection Engine and Content (Hybrid)
Arlington or New York or Austin or Sunnyvale or Redmond
$160k-$250k/yr HybridFull Time
5+ YOE5+ years in product management for detection content, SIEM, XDR, cloud security; large-scale distributed systems; strong communication; willing to travel up to 20%; onsite 1-3 days/week; BA/BS, Master’s desirable.
Distributed Systems, Threat Detection, Security Analytics, Cloud Security, XDR, SIEM
4w
Save
Mark Applied
Hide
Security Engineer, Level 5
Los Angeles or Palo Alto or Bellevue or Santa Monica
$178k-$313k/yr OnsiteFull Time
6+ YOE6+ years security experience post-Bachelor's, expertise in infrastructure/enterprise/access/appsec/detection or abuse domains; experience with cloud, Kubernetes, IAM, CSPM, AI tools, threat modeling, and securing distributed systems.
Kubernetes, IAM, CSPM, AI tools, AI/ML
1mo
Save
Mark Applied
Hide
Product Specialist (SOC & Security Automation)
Sunnyvale, California, United States
$150k-$250k/yr OnsiteFull Time
5+ YOE5+ years hands-on SOC experience (analyst, detection engineer, threat hunter, or incident responder); deep fluency in SOC workflows; experience improving tooling/processes; stakeholder engagement and product direction translation.
1mo
Save
Mark Applied
Hide
Cloud Security Operations Analyst - 8+ Years
Pune or Milpitas or Seattle or Princeton or Cape Town or London or Zurich or Singapore or Mexico City
RemoteFull Time
8+ YOE8+ years cloud security engineering experience in multi-cloud (AWS/Azure). Hands-on with AWS and Azure security services, CSPM/CWPP, threat detection, incident response, IAM, network controls, and continuous monitoring.
AWS GuardDuty, AWS Security Hub, AWS WAF, AWS Shield Advanced, Microsoft Defender for Cloud, CSPM, CWPP, NGX, Azure Security controls