Senior Cyber Security Engineer

About the role

The Senior Security Engineer is a key technical leader within the Security Engineering organization and plays a central role in turning a traditional Security Operations Center into an AI-driven, investigation-centric threat response function. It is an engineering-forward role focused on deep incident investigation, advanced threat detection engineering, proactive threat hunting and improving the AI SOC platform so it can perform higher-quality investigations at scale. The ideal candidate is highly technical, curious and hands-on.

Key responsibilities

• Cybersecurity incident investigation: lead complex investigations across cloud, identity, endpoint, application and network layers, perform root-cause analysis, kill-chain reconstruction and evidence preservation, and turn findings into detections, automation playbooks and AI features.
• On-call rotation: serve as a senior escalation point for complex incidents and feed lessons learned back into detections, automations and the AI SOC platform.
• Threat detection engineering: design, build and tune detection logic in Splunk, SOAR and other security telemetry systems, establish repeatable detection processes and reduce false positives.
• Proactive threat hunting: run intelligence-driven hunts across large datasets using anomaly detection and adversary emulation, and turn insights into detections, AI models and automated enrichment.
• AI SOC enhancement: contribute signals, features and decision logic to make the AI SOC more autonomous, and help integrate hunting patterns and detection insights into AI pipelines.
• Automation and SOAR engineering: create reliable automation for triage, enrichment, correlation and containment, and integrate new data sources and threat-intelligence feeds.
• Collaboration and mentorship: work with SecOps, Cloud, AppSec, Detection and AI Engineering teams, produce documentation and runbooks, and mentor SOC analysts and junior engineers.