Skip to main content

Sr. Security Engineer, Threat Detection and Response

Posted today

ektelloMillbrae (CA)

SENIORITY

Senior

SALARY

$100.00 – $150.00 / hour

Apply (opens in a new tab)

About the role

Sr. Security Engineer – Threat Detection & Response (TDR)
Location: (100% Remote)
Position Type: 12+ Month Contract (Contract-to-Hire with Multi-Extension Capability)
Pay Rate: $100.00 – $150.00 / hour (W2)
About the Role: The Threat Detection and Response (TDR) team is focused on automating security detection, responding to security incidents, and collaborating with partner teams to build capabilities that support the complete incident lifecycle. As the front-line defense, this team detects, investigates, and responds to both internal and external security threats and malicious activity across data, systems, and infrastructure. As a Senior Security Engineer, you will play a pivotal role in defining and executing our strategic vision for threat detection and incident response processes while mentoring fellow team members. In this high-impact position, you will build, optimize, and scale security capabilities to deliver world-class threat detection and incident management. The Difference You Will MakeDrive Innovation: Define and execute novel approaches to detecting, containing, and mitigating high-priority threats and security incidents. Proactive Security Elevation: Partner with cross-functional teams to improve overall enterprise security based on post-investigation root-cause analysis, effectively eliminating entire classes of security vulnerabilities. Mentorship & Leadership: Guide and mentor engineering peers while influencing security best practices across the organization. A Typical DayIncident Investigation & Response: Perform high-priority investigations into security incidents leveraging digital forensics, data analytics, and deep technical capabilities. Detection & Automation Engineering: Utilize coding, data analytics, and investigative skills to hunt for threats, build automation models, and streamline incident response workflows at scale. Proactive Threat Hunting: Conduct threat hunting across corporate and cloud production environments to identify anomalous or suspicious activity before it escalates. Cross-Functional Collaboration: Partner closely with internal engineering teams to deploy advanced detection solutions, while coordinating with Legal, Privacy, and Executive stakeholders on complex investigations. Visibility & Coverage Expansion: Identify infrastructure logging gaps and collaborate with business partners to onboard telemetry for enhanced threat visibility.
Qualifications & Required Expertise: Core Qualifications 5+ years of hands-on, technical experience in security operations, including investigations, incident response/management, digital forensics, threat hunting, threat intelligence, or detection engineering. Strong Scripting & Data Skills: Proficiency in Python (or a similar scripting language).Frequent hands-on use of SQL and Pandas for analytical tasks. Framework Mastery: In-depth knowledge and practical application of the MITRE ATT&CK framework and the Cyber Kill Chain across modern threat landscapes. Automation: Demonstrated experience automating security detection and incident response workflows.
Preferred Skills: Hands-on experience with AWS services and architecture (EC2, S3, Lambda, RDS).Familiarity with Elasticsearch (ELK stack) or comparable SIEM/log aggregation solutions.
Professional & Interpersonal Skills: Leadership & Influence: Ability to lead cross-functional teams through complex, ambiguous situations through influence rather than authority. Composure Under Pressure: Ability to work calmly, collaboratively, and decisively in critical, high-stress incident response scenarios. Autonomy & Organization: Self-motivated, creative problem-solver capable of working independently with minimal guidance while managing multiple priorities efficiently.#IND #LI-DC2

Before you apply

Applying takes about a minute. These four things decide how fast it moves after that.

Your profile is current

It's what we read first. Occupations, seniority and locations matter more than a long history.

Two examples you can talk through

Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.

A number in mind

What you're on now and what would make you move. We negotiate better when we know both.

Your notice period

Employers plan around it, and it's the question that stalls offers most often.

Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.

More like this