Staff Engineer, Detection and Response

This is a Fully Remote Job About Our Client: The organization operates in the SaaS industry, providing go-to-market solutions for revenue teams worldwide. It addresses challenges in sales and marketing by offering verified contact data and engagement tools for millions of B2B contacts and companies. With rapid growth since its founding in 2015 and a significant funding history, the organization serves a diverse client base ranging from startups to large enterprises. About the Opportunity: The STAFF ENGINEER, DETECTION AND RESPONSE leads the detection and response strategy within the security team, driving hands-on development of detection systems, response automations, and investigation tools. This role is crucial for managing complex security incidents and establishing scalable standards and architecture to effectively detect and contain threats. Responsibilities: Own detection and response strategy aligned with security key results, reporting progress and risks to leadership. Collaborate with Engineering, Infrastructure, and IT teams to integrate logging, telemetry, and response readiness into roadmaps. Define standards for detections, response as code, review practices, playbook quality, and AI-assisted workflows. Mentor engineers in detection ownership and incident leadership. Manage detection architecture, coverage planning, signal quality, and alert tuning. Oversee detection lifecycle including prioritization, testing, simulation, and coverage reviews. Develop and deploy MITRE ATT&CK-aligned detections, threat hunts, and automations. Maintain and improve incident response plans, including severity models, roles, escalation, and communication. Conduct tabletop exercises with cross-functional teams and build forensic readiness. Measure incident response effectiveness and incorporate lessons into processes. Lead high-severity incidents as technical lead or incident commander. Implement AI-augmented detection and response processes with appropriate oversight. Requirements: 8+ years in detection and response, detection engineering, security engineering, or incident response. Proven leadership in D&R strategy or multi-quarter initiatives with measurable outcomes. Experience designing detection architecture and deploying detection systems on modern SIEMs (Panther preferred). Strong skills in Python, Git, CI/CD, and detection-as-code. Experience handling high-severity incidents in cloud and SaaS environments and enhancing IR processes. Expertise with cloud platforms, ideally GCP, and familiarity with tools like Google Workspace, Okta, GitHub, Slack, Atlassian, Cloudflare, CrowdStrike, Kandji, and Snowflake. Ability to exercise sound judgment with incomplete information and influence diverse stakeholders. Pay Range and Compensation Package: The pay range and compensation package for this role will be determined based on the candidate's experience, skills, and other relevant factors. Benefits & Perks: Equity Company bonus or sales commissions/bonuses 401(k) plan At least 10 paid holidays per year Flexible paid time off Parental leave Equal Opportunity Statement: Our client is an equal opportunity employer. They celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, or national origin. Note: TalentHop is a recruitment partner of this role. Please note that all employment decisions, including candidate assessment, interviews, hiring, compensation, and employment terms, are made exclusively by the hiring employer.