Detection Engineer

Responsibilities:

• Own detection problems end-to-end, from emerging TTP or false negative to investigation, detection hypothesis, validation, production coverage, and measurement.
• Use AI as a force multiplier—build evals, supervise model behavior, use coding agents aggressively, and automate repetitive investigative work.
• Partner with Product and Engineering on signals, detection logic, edge cases, and validation, and work with customers and GTM on detection gaps.

Qualifications:

• Bring deep practitioner judgment from detection engineering, SOC/IR, threat intelligence/OSINT, or email/messaging security; range across multiple areas is a plus.
• Take messy detection failures to root cause—prove what matters in the data and turn FP/FN cases into durable fixes.
• Think like both attacker and defender across phishing, BEC, impersonation, credential theft, ATO, and evolving social-engineering TTPs.

Nice to Have:

• SEG/email-security depth: SPF, DKIM, DMARC, headers, mail flow, and sender identity.
• Experience with M365/Exchange Online, Google Workspace, or email-security APIs.
• Detection-as-code, eval datasets/labeling, model benchmarks, or LLM/ML security systems.

Why Join:

• Shape the product, not just operate it, by turning practitioner judgment into detections, AI behavior, and product capabilities.
• Join a high-growth environment with meaningful equity, flexible PTO, and comprehensive health benefits.