25 threat detection engineer jobs at 20 companies in Berkeley, CA

6d
Save
Mark Applied
Hide
Engineer II, Threat Detection - Windows (Hybrid)
Sunnyvale or New York City or Austin or Redmond
$100k-$145k/yr HybridFull Time
CrowdStrike
CrowdStrikeNASDAQ: CRWD: Provides cloud-native endpoint protection and cybersecurity services.
4+ YOEAbility to analyze malware and intrusion telemetry, author behavioral detections for Windows endpoints, use Python/PowerShell for automation, and collaborate with threat intelligence; U.S. citizenship or green card required for CJIS eligibility.
PowerShell, Python, EDR, Regular expressions, MITRE ATT&CK
3w
Save
Mark Applied
Hide
Threat Detection Engineer – Security Operations
Mountain View, California, United States
$113k-$140k/yr OnsiteFull Time
ID.me
ID.me: Provides secure digital identity verification and authentication services.
2+ YOE2+ years security engineering/ops experience; proficiency with Splunk/Elastic/Chronicle/Logstash, Python and SQL, YARA-L/Sigma detection formats, LLM APIs/AI literacy, cloud-scale log management, MITRE ATT&CK, and IaC (Terraform/Git).
Splunk, Elastic Stack, Logstash, Google Chronicle (SecOps), Python, SQL, YARA-L, Sigma, Kusto, Lucene, LLM APIs, OpenAI, Anthropic, Google Gemini, Snowflake, Terraform, GitHub, GitLab CI/CD, LangChain, LlamaIndex, SOAR, SIEM
1w
Save
Mark Applied
Hide
Member of Technical Staff, SecOps & Threat Detection Engineer
San Francisco, California, United States
$265k-$310k/yr OnsiteFull Time
Envoy
Envoy: Unified workplace management platform for hybrid office operations.
6+ YOE6+ years in security/SRE/infrastructure with security focus; experience building detection, SIEM, EDR (SentinelOne), cloud (AWS), scripting (Python/Go), and strong incident detection and response skills.
LenelS2, Brivo, Genetec, Honeywell, Cisco Meraki, Okta, Microsoft Azure, Microsoft Teams, Slack, ServiceNow, DocuSign, Avigilon Alta, Descartes Visual Compliance, SentinelOne, SIEM, AWS, Python, Go
2mo
Save
Mark Applied
Hide
Security Engineer, Insider Threat
San Francisco, California, United States
$131k-$192k/yr RemoteFull Time
DoorDash
DoorDashNASDAQ: DASH: On-demand delivery platform connecting consumers with local merchants.
2+ YOEInsider threat investigations, incident response, and detection engineering with standard security tooling.
SIEM, SOAR, UEBA, UAM, DLP, SQL
1mo
Save
Mark Applied
Hide
Threat Intel Research Engineer
San Francisco or United States
$140k-$180k/yr HybridFull Time
DTEX Systems
DTEX Systems: Provides software for insider risk management and data protection.
3+ YOE3+ years full-stack development (Python, Django/Flask, React/TypeScript), deep system knowledge (Windows/Mac/Linux), cybersecurity and detection engineering experience, familiarity with data pipelines, RESTful APIs, AWS, QE/test automation and CI/CD, strong communication.
Python, Django, Flask, React, TypeScript, Elasticsearch, Spark, AWS, CI/CD, RESTful APIs
2mo
Save
Mark Applied
Hide
Director, Threat Research
Sunnyvale, California, United States
$227k-$272k/yr OnsiteFull Time
Illumio
Illumio: Provides zero-trust segmentation software to contain cyberattacks.
10+ years in threat research/detection engineering; hands-on security work; prior leadership or scale-building experience; strong MITRE ATT&CK knowledge; able to translate research into product insights; excellent communication.
MITRE ATT&CK, Threat Intelligence, Incident Response, Graph Analytics
1w
Save
Mark Applied
Hide
Security Operations Analyst – Detection Engineering & Threat Hunting
San Jose, California, United States
$112k-$236k/yr OnsiteFull Time
TikTok
TikTok: Global short-form video hosting and social media platform.
Experience in 24/7 security operations, SIEM/EDR proficiency, detection engineering and threat hunting, scripting for automation, and knowledge of attacker tactics and MITRE ATT&CK.
SIEM, Splunk, Chronicle, Elastic, EDR, SentinelOne, CrowdStrike, Sigma, EQL, KQL, YARA, SOAR, GitOps, CI/CD, Python, PowerShell, MITRE ATT&CK, MaGMa
1w
Save
Mark Applied
Hide
Senior Manager, AI Response & Threat
United States or San Francisco
$180k-$215k/yr RemoteFull Time
Gainsight
Gainsight: AI-powered customer success and retention software platform.
6+ YOE6–9 years relevant experience, security operations and engineering background, experience with SOCs, cloud detection across AWS/Azure/GCP, ability to manage distributed teams and detect/mitigate AI threats.
AWS, Azure, GCP
1mo
Save
Mark Applied
Hide
Security Engineer, Threat Response
New York City or San Francisco
$202k-$230k/yr HybridFull Time
Asana
AsanaNYSE: ASAN: Software platform for team project management and workflow automation.
5+ YOE5+ years in security operations, incident response, threat detection, or vulnerability management; strong SIEM/EDR experience; security automation; forensics; cloud security; familiarity with MITRE ATT&CK.
SIEM, EDR, Endpoint Security, Cloud Security, Python, PowerShell, Datadog, Splunk, Panther, CrowdStrike, SentinelOne, MITRE ATTACK, AWS
1mo
Save
Mark Applied
Hide
Security Engineer, Level 5, Detection & Response
Los Angeles or Palo Alto or Santa Monica
$178k-$313k/yr OnsiteFull Time
Snap
SnapNYSE: SNAP: Develops social media applications and augmented reality technology.
6+ YOE6+ years security experience; BS in CS/Engineering; strong Python/Go; OS/cloud proficiency; incident response and threat hunting.
Python, Go, Kubernetes, AWS, Google Cloud Platform, macOS, Windows, Linux
1mo
Save
Mark Applied
Hide
Security Engineer, Level 5, Detection & Response
Los Angeles or Palo Alto or Santa Monica
$178k-$313k/yr HybridFull Time
Snap
SnapNYSE: SNAP: Provides visual messaging software and augmented reality wearable devices.
6+ YOE6+ years in security fields; strong Python/Go; cloud and OS internals knowledge; threat hunting and incident response.
Python, Go, macOS, Windows, Linux, Kubernetes, AWS, Google Cloud Platform
3w
Save
Mark Applied
Hide
Lead Security Engineer
San Francisco or New York
$200k-$300k/yr OnsiteFull Time
Nuvo
Nuvo: Platform for automating B2B commerce and trade credit management.
5+ YOE5+ years security engineering experience with deep application/product security expertise; experience across cloud, infrastructure, detection; threat modeling, secure design, code review, and building a security program.
Vue, GraphQL, DSL, Kubernetes, IAM
2w
Save
Mark Applied
Hide
Security Engineer
San Francisco, California, United States
$200k-$315k/yr HybridFull Time
Nooks
Nooks: AI platform that automates B2B sales dialing and prospecting.
4+ YOE4+ years information security experience, strong application/cloud security (AWS/GCP), threat modeling, secure SDLC, detection & response, startup experience, strong communication and risk prioritization skills.
AWS, GCP, SOC 2, ISO 27001
3w
Save
Mark Applied
Hide
Staff Security Engineer, Enterprise Security Operations
Mountain View or San Francisco or Seattle or Pittsburgh or Dallas or Detroit or Phoenix
$171k-$273k/yr HybridFull Time
Aurora
AuroraNASDAQ: AUR: Developing autonomous driving technology for trucking and passenger mobility.
12+ YOE12+ years in enterprise security operations owning and tuning security platforms, developing detections, threat hunting, incident investigation, and operationalizing enterprise security tooling.
EDR/XDR, MDM, SIEM, DLP, IAM/IGA, DNS security, Email security, PKI, CrowdStrike, SentinelOne, Splunk, Panther, Sentinel, Jamf, Kandji/Iru, Puppet, WorkspaceONE, Intune, Zscaler, Okta, Proofpoint, Wiz, osquery, Python, Bash, MITRE ATT&CK, CloudTrail, GuardDuty, Security Hub
3w
Save
Mark Applied
Hide
Senior Adversary Pursuit Engineer
Atlanta or Boston or Chicago or Denver or Los Angeles or New York City or San Francisco or Austin or United States
$140k-$175k/yr RemoteFull Time
Flock Safety
Flock Safety: Sells AI-powered cameras and software for public safety surveillance.
5+ YOE5+ years cybersecurity experience (≥3 years DFIR/threat hunting), DFIR on diverse environments including Android IoT, cloud (AWS/GCP/Azure), SIEM/EDR expertise, detection engineering (Splunk SPL, YARA, Sigma), automation (Torq, Tines), MITRE ATT&CK mapping, and mentoring skills.
AWS, GCP, Azure, Android, SIEM, EDR, Torq, Tines, LLMs, Splunk SPL, YARA, Sigma, MITRE ATT&CK
1w
Save
Mark Applied
Hide
Security Engineer II
Dublin, California, United States
$125k-$213k/yr HybridFull Time
Ross Stores
Ross StoresNASDAQ: ROST: Discount retail chain selling brand-name apparel and home fashions
7+ YOE7+ years information security experience (5+ with a large organization). Strong knowledge of endpoint, cloud, SIEM, EDR/XDR/MDR, log management, threat detection/response and automation. BLS: bachelor's degree preferred or senior certification; strong analytical, organizational and project estimation skills.
Anti-virus/malware protection, Advanced Threat Protection, Log Collection & Analysis, User Behavior Analytics, Vulnerabilities Management, SIEM, EDR, XDR, MDR, IR, File Integrity Monitoring, Endpoint Security, mobile security
2w
Save
Mark Applied
Hide
Senior Security Operations Engineer
Redmond or Mountain View
$120k-$235k/yr HybridFull Time
Microsoft
MicrosoftNASDAQ: MSFT: Develops software, services, devices, and cloud computing solutions.
3+ YOEAdvanced degree in CS, Math, or Statistics or equivalent experience; 3–4+ years in software development lifecycle, large-scale computing, threat modeling, cyber security, SOC detection, SIEM, or incident response; knowledge of endpoint security and identity systems.
Entra, Intune, Defender for Endpoint, Defender for Cloud
1w
Save
Mark Applied
Hide
Manager, Security Research
San Mateo, California, United States
$245k-$265k/yr OnsiteFull Time
Exabeam: AI-driven security operations platform for threat detection and response.
10+ YOE2+ Mgmt10+ years in cybersecurity with expertise in threat detection, detection engineering, behavioral analytics, and threat research; 2+ years managing technical teams; hands-on coding with Python and working with large-scale telemetry.
Python, Elasticsearch, SQL, Splunk, Kusto, Exabeam, BEAM analytics engine, AWS, Azure, Google Cloud Platform
1mo
Save
Mark Applied
Hide
Product Specialist (SOC & Security Automation)
Sunnyvale, California, United States
$150k-$250k/yr OnsiteFull Time
Cylake
Cylake: Developing an AI-native cybersecurity platform for sovereign environments.
5+ YOE5+ years hands-on SOC experience (analyst, detection engineer, threat hunter, or incident responder); deep fluency in SOC workflows; experience improving tooling/processes; stakeholder engagement and product direction translation.
2w
Save
Mark Applied
Hide
Cloud Security Operations Analyst - 8+ Years
Pune or Milpitas or Seattle or Princeton or Cape Town or London or Zurich or Singapore or Mexico City
RemoteFull Time
Zensar
ZensarNational Stock Exchange of India: ZENSARTECH: Global technology firm providing digital transformation and infrastructure services.
8+ YOE8+ years cloud security engineering experience in multi-cloud (AWS/Azure). Hands-on with AWS and Azure security services, CSPM/CWPP, threat detection, incident response, IAM, network controls, and continuous monitoring.
AWS GuardDuty, AWS Security Hub, AWS WAF, AWS Shield Advanced, Microsoft Defender for Cloud, CSPM, CWPP, NGX, Azure Security controls