Senior Threat Detection Engineer — Detection as Code

Cribl seeks a senior Detection Engineer to join Team Alpine, protecting Cribl itself. You will design, build, test, and tune detections as code in a Git Ops pipeline, map detections to MITRE ATT&CK, and reduce alert noise while improving coverage across cloud, SaaS, and identity realms.

You will lead investigations during the initial IR rotation and drive runbooks, detections, and data pipelines to ensure healthy telemetry before it reaches the SIEM.

This role, Senior Threat Detection Engineer — Detection as Code at Cribl, could be your next opportunity.

We aim to respond to suitable candidates as soon as possible.

Full responsibilities and requirements are described in the listing above.

Learn more about the Senior Threat Detection Engineer — Detection as Code role in the description above.

We appreciate your interest in this position.