Senior Threat Detection Engineer; Detection-as-Code

Cribl is seeking a senior security engineer to join Team Alpine, protecting Cribl's telemetry infrastructure with hands-on detection engineering, threat hunting, and incident response. You will own detections as code, map to MITRE ATT&CK, and drive improvements across log pipelines.

You will collaborate with Product Security, IT, and Legal, participate in IR rotations for 6–12 months, and help scale detections to production while documenting runbooks and best practices.

We would love to welcome a new Senior Threat Detection Engineer (Detection-as-Code) to our team in Honolulu, HI, United States.

Full responsibilities and requirements are described in the listing above.

Learn more about the Senior Threat Detection Engineer (Detection-as-Code) role in the description above.

We appreciate your interest in this position.

Join Cribl and contribute to our ongoing work.

Take a moment to read everything above and see whether this role is right for you.