Detection Engineer – Product Security

Seniority: Mid-Senior / Senior Level
Department: Cybersecurity / Product Security
Employment Type: Full-time / Hybrid - 2 days at the office

Role Overview

We are looking for an experienced Detection Engineer to strengthen security monitoring, threat detection, and incident response across web and mobile applications, APIs, and supporting services.

The ideal candidate combines expertise in security analytics, SIEM technologies, software development, and AI-powered automation.

You will be responsible for developing reliable security detections, improving logging and monitoring capabilities, building AI-assisted alert triage solutions, and automating security response workflows.

Key Responsibilities

• Design, develop, test, and optimize security detection rules and anomaly detection capabilities within SIEM platforms.
• Identify and detect threats such as account takeover, automated attacks, API abuse, suspicious authentication, unauthorized access, and data exposure.
• Improve application security logging, telemetry, and event monitoring in collaboration with development and infrastructure teams.
• Develop and enhance AI-powered security triage agents, including LLM integrations, automated workflows, alert enrichment, and escalation mechanisms.
• Build and maintain automated incident response workflows, investigation playbooks, and alert routing processes.
• Implement secure response automation with appropriate access controls, human approvals, auditing, and rollback mechanisms.
• Test and validate detection rules using historical data, version control, and controlled deployments.
• Monitor detection effectiveness, reduce false positives, and continuously improve security monitoring capabilities.
• Collaborate with security, engineering, and platform teams to identify and address security gaps.

Required Skills & Experience

• Strong experience in security engineering, detection engineering, or security-focused software development.
• Hands-on experience with SIEM platforms, security analytics, detection rules, and alert optimization.
• Good understanding of web application, mobile application, and API security threats.
• Programming experience with Python, Go, or Java.
• Practical experience developing or integrating AI agents or LLM-powered applications, including tool integrations, workflow orchestration, and evaluation.
• Knowledge of security logging, event schemas, telemetry pipelines, and data quality.
• Experience developing and deploying secure automation workflows.
• Understanding of authentication, authorization, session management, and common application vulnerabilities.
• Familiarity with incident response processes, security investigations, and automation safeguards.
• Strong analytical, troubleshooting, and communication skills.
• Ability to collaborate effectively with cross-functional technical teams.

Nice to Have

• Experience with behavioral analytics, anomaly detection, or machine learning.
• Familiarity with AI agent frameworks, LLM tool calling, RAG, and AI evaluation techniques.
• Experience with SOAR platforms and automated incident response.
• Knowledge of web and mobile application penetration testing or security investigations.
• Experience with Infrastructure as Code (IaC), CI/CD pipelines, and DevSecOps practices.
• Familiarity with detection-as-code methodologies and security automation testing.

Ideal Candidate

A hands-on security engineer with strong software development skills who can build and improve detection systems, integrate AI agents into security operations, and develop reliable security automation.

The role requires someone comfortable working across cybersecurity, software engineering, and AI technologies, with a strong focus on practical implementation and continuous improvement.