17 threat detection engineer jobs at 12 companies in Morgan Hill, CA
1mo
Save
Mark Applied
Hide
Engineer II, Threat Detection - Windows (Hybrid)
Sunnyvale or New York City or Austin or Redmond
$100k-$145k/yr HybridFull Time
4+ YOEAbility to analyze malware and intrusion telemetry, author behavioral detections for Windows endpoints, use Python/PowerShell for automation, and collaborate with threat intelligence; U.S. citizenship or green card required for CJIS eligibility.
PowerShell, Python, EDR, Regular expressions, MITRE ATT&CK
1mo
Save
Mark Applied
Hide
Threat Detection Engineer – Security Operations
Mountain View, California, United States
$113k-$140k/yr OnsiteFull Time
2+ YOE2+ years security engineering/ops experience; proficiency with Splunk/Elastic/Chronicle/Logstash, Python and SQL, YARA-L/Sigma detection formats, LLM APIs/AI literacy, cloud-scale log management, MITRE ATT&CK, and IaC (Terraform/Git).
Splunk, Elastic Stack, Logstash, Google Chronicle (SecOps), Python, SQL, YARA-L, Sigma, Kusto, Lucene, LLM APIs, OpenAI, Anthropic, Google Gemini, Snowflake, Terraform, GitHub, GitLab CI/CD, LangChain, LlamaIndex, SOAR, SIEM
4d
Save
Mark Applied
Hide
Network Threat Detection R&D Engineer
Palo Alto, California, United States
$144k-$230k/yr OnsiteFull Time
12+ YOEBachelor's and 12+ years, master's and 10+ years, or PhD and 7+ years; network security and IDS signature experience; Python, Docker, Kubernetes, AI systems, communication, and U.S. work authorization required.
Python, Docker, Kubernetes
1mo
Save
Mark Applied
Hide
Security Operations Analyst – Detection Engineering & Threat Hunting
San Jose, California, United States
$112k-$236k/yr OnsiteFull Time
Experience in 24/7 security operations, SIEM/EDR proficiency, detection engineering and threat hunting, scripting for automation, and knowledge of attacker tactics and MITRE ATT&CK.
SIEM, Splunk, Chronicle, Elastic, EDR, SentinelOne, CrowdStrike, Sigma, EQL, KQL, YARA, SOAR, GitOps, CI/CD, Python, PowerShell, MITRE ATT&CK, MaGMa
1w
Save
Mark Applied
Hide
Security Operations Analyst - Detection Engineering & Threat Hunting, Global SOC
San Jose or Los Angeles or Singapore or New York City or London or Dublin or Paris or Berlin or Dubai or Jakarta or Seoul or Tokyo
$112k-$223k/yr OnsiteFull Time
4+ YOERequires 4+ years in security operations, incident response, detection engineering, or threat hunting; SIEM, EDR, detection logic, scripting, threat hunting, and telemetry investigation experience. Bachelor's degree and certifications preferred.
SIEM, Intrusion Detection and Prevention Systems (IDS/IPS), firewalls, Endpoint Detection and Response (EDR), Splunk, Chronicle, Elastic, SentinelOne, CrowdStrike, Sigma, EQL, KQL, YARA, Python, PowerShell, MITRE ATT&CK, MaGMa, SOAR, GitOps, CI/CD
1mo
Save
Mark Applied
Hide
Security Engineer, Detection & Response - Global Security Organization
San Jose, California, United States
$156k-$317k/yr OnsiteFull Time
Strong security fundamentals across networks/hosts/apps/containers; experience with WAF/HIDS/NTA/EDR/DLP; coding for log analysis and detection-as-code; threat modeling, incident analysis, and ML/AI for security.
WAF, HIDS, NTA, EDR, DLP, MITRE ATT&CK, NIST CSF, Python, numpy, pandas, sklearn, Detection-as-Code
3mo
Save
Mark Applied
Hide
Security Engineer, Level 5, Detection & Response
Los Angeles or Palo Alto or Santa Monica
$178k-$313k/yr OnsiteFull Time
6+ YOE6+ years security experience; BS in CS/Engineering; strong Python/Go; OS/cloud proficiency; incident response and threat hunting.
Python, Go, Kubernetes, AWS, Google Cloud Platform, macOS, Windows, Linux
3mo
Save
Mark Applied
Hide
Security Engineer, Level 5, Detection & Response
Los Angeles or Palo Alto or Santa Monica
$178k-$313k/yr HybridFull Time
6+ YOE6+ years in security fields; strong Python/Go; cloud and OS internals knowledge; threat hunting and incident response.
Python, Go, macOS, Windows, Linux, Kubernetes, AWS, Google Cloud Platform
1w
Save
Mark Applied
Hide
Security Researcher (Detection Systems)
Sunnyvale, California, United States
$150k-$250k/yr OnsiteFull Time
5+ YOE5+ years building large-scale threat analysis or detection solutions, or a relevant Ph.D.; expertise in threat hunting, malware, vulnerability analysis, reverse engineering, or offensive security; strong Python proficiency.
Python, C, C++, Rust, Go, MITRE ATT&CK, EDR, XDR, SOC, IDS, IPS, LLMs
1w
Save
Mark Applied
Hide
Security Engineer
Bellevue or Menlo Park or Washington or New York City
$271k-$347k/yr OnsiteFull Time
15+ YOE15+ years managing security risk; experience with distributed systems, access control, encryption, intrusion detection, system design, threat modeling, engineered controls, and communicating technical risk to senior leadership.
3mo
Save
Mark Applied
Hide
Principal Product Manager - Threat Detection Engine and Content (Hybrid)
Arlington or New York or Austin or Sunnyvale or Redmond
$160k-$250k/yr HybridFull Time
5+ YOE5+ years in product management for detection content, SIEM, XDR, cloud security; large-scale distributed systems; strong communication; willing to travel up to 20%; onsite 1-3 days/week; BA/BS, Master’s desirable.
Distributed Systems, Threat Detection, Security Analytics, Cloud Security, XDR, SIEM
3w
Save
Mark Applied
Hide
Staff Security Software Engineer
Redwood City, California, United States
HybridFull Time
Hands-on experience building security foundations (identity, access, secrets, encryption), strong coding and systems skills, threat modeling, and incident detection/response in production environments.
1d
Save
Mark Applied
Hide
Senior ML Engineer
Bellevue or Palo Alto or San Francisco or New York City
$149k-$224k/yr HybridFull Time
Architects threat-detection strategies, formulates security threats mathematically, develops probabilistic and graph analytics capabilities, and operationalizes production machine learning models.
AI, Data, CRM, Agentforce
1mo
Save
Mark Applied
Hide
Security Engineer, Level 5
Los Angeles or Palo Alto or Bellevue or Santa Monica
$178k-$313k/yr OnsiteFull Time
6+ YOE6+ years security experience post-Bachelor's, expertise in infrastructure/enterprise/access/appsec/detection or abuse domains; experience with cloud, Kubernetes, IAM, CSPM, AI tools, threat modeling, and securing distributed systems.
Kubernetes, IAM, CSPM, AI tools, AI/ML
1mo
Save
Mark Applied
Hide
Security Engineer II
Dublin, California, United States
$125k-$213k/yr HybridFull Time
7+ YOE7+ years information security experience (5+ with a large organization). Strong knowledge of endpoint, cloud, SIEM, EDR/XDR/MDR, log management, threat detection/response and automation. BLS: bachelor's degree preferred or senior certification; strong analytical, organizational and project estimation skills.
Anti-virus/malware protection, Advanced Threat Protection, Log Collection & Analysis, User Behavior Analytics, Vulnerabilities Management, SIEM, EDR, XDR, MDR, IR, File Integrity Monitoring, Endpoint Security, mobile security
5d
Save
Mark Applied
Hide
Principal Cybersecurity Lead
Saratoga, California, United States
$160k-$220k/yr OnsiteFull Time
Substantial hands-on cybersecurity experience, high-severity incident leadership, strong programming, enterprise network and cloud expertise, and experience with detection engineering, threat hunting, vulnerability management, and digital forensics.
Internet of Things (IoT), Low Earth Orbit (LEO), MITRE ATT&CK, Python, Go, Rust, PowerShell, SQL, SIEM, EDR, NDR, XDR, IAM, CMMC, TCP/IP, DNS, HTTP/TLS, VPN
1mo
Save
Mark Applied
Hide
Cloud Security Operations Analyst - 8+ Years
Pune or Milpitas or Seattle or Princeton or Cape Town or London or Zurich or Singapore or Mexico City
RemoteFull Time
8+ YOE8+ years cloud security engineering experience in multi-cloud (AWS/Azure). Hands-on with AWS and Azure security services, CSPM/CWPP, threat detection, incident response, IAM, network controls, and continuous monitoring.
AWS GuardDuty, AWS Security Hub, AWS WAF, AWS Shield Advanced, Microsoft Defender for Cloud, CSPM, CWPP, NGX, Azure Security controls
Explore Jobs