FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in security engineering with a focus on detection engineering, threat hunting, and digital forensics. Proficient in developing automated detection workflows and conducting forensic investigations in cloud environments.
Highest-signal resume keywords
Detection EngineeringThreat HuntingDigital Forensics and Incident ResponseCloud Infrastructure SecurityProgramming/Scripting Proficiency
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Detection Rules WritingForensic InvestigationsCloud Security (AWS/GCP)Linux System InternalsContainer Runtime SecurityNetwork TelemetryDetection Logic DevelopmentAutomated Response CapabilitiesIncident ResponseBehavioral Analytics
Soft Skills
Technical CommunicationAbility to Thrive in High-Ambiguity Environments
Tools & Technologies
SIEMYARASigmaFalcoEDR
Industry Keywords
Threat ActorsZero-Day VulnerabilitiesMulti-CloudAI WorkloadsSOAR Orchestration
Tech Stack
Tools & technologiesAWSCloudGoogle Cloud PlatformLinuxPythonRustGo
About the role
Key responsibilities & impact- Design, build, and maintain detection rules, signatures, and behavioral analytics across cloud, bare-metal, and internal infrastructure
- Conduct proactive threat hunting to uncover threat actors, attack vectors, and zero-day vulnerabilities across multi-cloud and AI workloads
- Develop detection logic and playbooks as code to reduce manual triage and improve detection and response times
- Build AI-powered detection and investigation workflows using internal LLM infrastructure
- Lead technical incident response investigations, forensic analysis, root-cause identification, and containment
- Architect automated response capabilities and SOAR orchestration pipelines
- Partner with Platform and Infrastructure engineering teams to harden systems and ensure telemetry coverage
- Participate in an engineering on-call rotation for 24/7 operational readiness
- Conduct post-incident reviews and drive root-cause remediation
- Mentor junior and mid-level security engineers
Requirements
What you’ll need- 5+ years of hands-on security engineering experience specializing in detection engineering, threat hunting, or digital forensics and incident response (DFIR)
- Strong programming/scripting proficiency (e.g., Python, Go, Rust, or Bash)
- Deep technical knowledge of cloud infrastructure security (AWS/GCP), Linux system internals, container runtime security, and network telemetry
- Clear understanding of the unique requirements of securing a cloud infrastructure provider
- Proven experience writing detection rules (SIEM, YARA, Sigma, Falco, or EDR queries) and managing detections through software development best practices
- Hands-on experience conducting forensic investigations and triaging complex, multi-stage attacks across cloud environments
- Strong technical communication skills
- Ability to thrive in high-ambiguity environments and execute at startup pace
- Willingness and ability to work from the San Francisco, San Jose, or Bellevue office 4 days per week
- Ability to work in the United States; sponsorship may be available
Benefits
Comp & perks- Generous cash & equity compensation
- Health, dental, and vision coverage for you and your dependents
- Wellness and commuter stipends for select roles
- 401k Plan with 2% company match (USA employees)
- Flexible paid time off plan
- Designated work from home day currently Tuesday