Cybersecurity engineer lead, detection engineer; Remote

Cybersecurity Engineer Lead – Detection Engineer (Remote, US)

Starbucks is looking for a cybersecurity engineer lead, detection engineer to design and build detections that power our ability to identify and stop real‑world threats.

$/yr - $/yr

From the beginning, Starbucks set out to be a different kind of company. One that not only celebrated coffee and the rich tradition, but that also brought a feeling of connection. We are known for developing extraordinary leaders who share this passion and are guided by their service to others.

Are you passionate about advancing cutting‑edge detection engineering initiatives to safeguard our partners, customers, and brand? As a Lead Detection Engineer you’ll design and build the detections that power our ability to identify and stop real‑world threats.

You’ll turn real attacker behaviors into reliable alerts, automate how detections are built and deployed, making sure our visibility keeps pace with evolving threats. This is a hands‑on role for someone who loves diving into data, thinking like an attacker, and improving how we detect and respond every day. This role will work closely with our SOC, Incident Response, Threat Intelligence, and Security Engineering teams.

The ideal candidate combines deep technical expertise, a strong understanding of adversary TTPs, is an expert at translating compliance requirements into detection strategy and has a passion for continuous improvement in detection coverage and quality.

• Lead the strategy and roadmap for detection engineering and alerting across security platforms (SIEM, EDR, SOAR, etc.)
• Break down complex cybersecurity threats and technical challenges into clear, actionable detection strategies – mapped to frameworks like MITRE ATT&CK and validated through simulation.
• Drive the deployment and continuous improvement of detection capabilities by establishing clear metrics for success, ensuring that each solution is designed end‑to‑end—from initial detection generation through seamless delivery to SOC engineer.
• Lead enterprise‑wide detection engineering initiatives, overseeing the development and deployment of advanced detection‑as‑code solutions across environments.
• Collaborate with cross‑functional teams, ensuring seamless coordination and partnership across various disciplines. Your efforts will focus on aligning diverse stakeholders and resources toward common detection and compliance objectives.
• Data‑driven detection improvements through tuning, false positive reduction, and visibility gap analysis across platforms.
• Measure effectiveness of detections through metrics such as MTTD, false positive rates, and coverage gaps.

• Bachelor's degree in a relevant field or 8+ years of equivalent work experience in cybersecurity engineering related roles.
• 6‑8 years of experience working in an information technology discipline.
• 6‑8 years of infrastructure / information security experience.
• 4+ years of experience in Detection Engineering.
• Strong hands‑on experience with SIEM platforms at scale.
• Proven ability to build, tune, and maintain custom threat detection rules using threat intel and enrichment data.
• Experience in building and managing detection‑as‑code workflows using version control and CI/CD pipeline.
• Advanced knowledge of cybersecurity principles, frameworks, tools and best practices.
• Experienced supporting regulatory compliance environment such as PCI.
• Strong problem‑solving and decision‑making abilities in high‑pressure situations.
• Excellent communication and collaboration skills, with the ability to work effectively with cross‑functional teams and stakeholders.
• Certifications such as CISSP, GCDA, GMON, or others focused on cybersecurity.

As a Starbucks partner, you (and your family) will have access to medical, dental, vision, basic and supplemental life insurance, and other voluntary insurance benefits. Partners have access to short‑term and long‑term disability, paid parental leave, family expansion reimbursement, paid vacation from date of hire, sick time, paid holidays, and personal days. Starbucks also offers a 401(k) retirement plan with employer match, a…