Sr. Security Engineer, Threat Detection and Response
Listed on 2026-10-18
-
IT/Tech
Cybersecurity, Security Management & Operations
Location:
(100% Remote) Position Type: 12+ Month Contract (Contract-to-Hire with Multi-Extension Capability) Pay Rate: $100.00 – $150.00 / hour (W2)
The Threat Detection and Response (TDR) team is focused on automating security detection, responding to security incidents, and collaborating with partner teams to build capabilities that support the complete incident lifecycle. As the front-line defense, this team detects, investigates, and responds to both internal and external security threats and malicious activity across data, systems, and infrastructure. As a Senior Security Engineer, you will play a pivotal role in defining and executing our strategic vision for threat detection and incident response processes while mentoring fellow team members.
In this high-impact position, you will build, optimize, and scale security capabilities to deliver world-class threat detection and incident management.
- Drive Innovation:
Define and execute novel approaches to detecting, containing, and mitigating high-priority threats and security incidents. - Proactive Security Elevation:
Partner with cross-functional teams to improve overall enterprise security based on post-investigation root-cause analysis, effectively eliminating entire classes of security vulnerabilities. - Mentorship & Leadership:
Guide and mentor engineering peers while influencing security best practices across the organization.
- Incident Investigation & Response:
Perform high-priority investigations into security incidents leveraging digital forensics, data analytics, and deep technical capabilities. - Detection & Automation Engineering:
Utilize coding, data analytics, and investigative skills to hunt for threats, build automation models, and streamline incident response workflows at scale. - Proactive Threat Hunting:
Conduct threat hunting across corporate and cloud production environments to identify anomalous or suspicious activity before it escalates. - Cross-Functional Collaboration:
Partner closely with internal engineering teams to deploy advanced detection solutions, while coordinating with Legal, Privacy, and Executive stakeholders on complex investigations. - Visibility & Coverage Expansion:
Identify infrastructure logging gaps and collaborate with business partners to onboard telemetry for enhanced threat visibility.
- 5+ years of hands-on, technical experience in security operations, including investigations, incident response/management, digital forensics, threat hunting, threat intelligence, or detection engineering.
- Strong Scripting & Data
Skills:
Proficiency in Python (or a similar scripting language). - Frequent hands-on use of SQL and Pandas for analytical tasks.
- Framework Mastery:
In-depth knowledge and practical application of the MITRE ATT&CK framework and the Cyber Kill Chain across modern threat landscapes. - Automation:
Demonstrated experience automating security detection and incident response workflows.
- Hands-on experience with AWS services and architecture (EC2, S3, Lambda, RDS).
- Familiarity with Elasticsearch (ELK stack) or comparable SIEM/log aggregation solutions.
- Leadership & Influence:
Ability to lead cross-functional teams through complex, ambiguous situations through influence rather than authority. - Composure Under Pressure:
Ability to work calmly, collaboratively, and decisively in critical, high-stress incident response scenarios. - Autonomy & Organization:
Self-motivated, creative problem-solver capable of working independently with minimal guidance while managing multiple priorities efficiently.
#IND #LI-DC2
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).