detection engineer

Upstart

<div><div><p><b>About Upstart</b></p>
<p>
At Upstart, we&rsquo;re united by a mission that matters: to radically reduce the cost and complexity of borrowing for all Americans. Every day, we bring creativity, experimentation, and advanced AI to reshape access to credit, helping millions move forward financially with clarity and confidence.</p>
<p>
As the leading AI lending marketplace, we partner with banks and credit unions to expand access to affordable credit through technology that&rsquo;s both radically intelligent and deeply human. Our platform runs over one million predictions per borrower using more than 1,800 signals, powering smarter, fairer decisions for millions of customers. But the numbers only hint at the impact. Every idea, every voice, and every contribution moves us closer to a world where credit never stands between people and their financial progress.</p>
<p>
We&rsquo;re proudly digital-first, giving most Upstarters the flexibility to do their best work from wherever they thrive, alongside teammates across 80+ cities in the US and Canada. Digital-first doesn&rsquo;t mean distant. We&rsquo;re intentional about in-person connection through team onsites, planning sessions, and moments that spark creativity and trust. And whether you choose to work primarily from home or collaborate in-person from one of our offices in Columbus, Austin, the Bay Area, or New York City (opening Summer 2026), you&rsquo;ll have the support to work in the way that works best for you.</p>
<p>
If you&rsquo;re energized by tackling meaningful problems, excited to innovate with purpose, and motivated by work that truly matters, we&rsquo;d love to hear from you.</p>
</div><p><b>
The Team</b></p>
<p>
Upstart&rsquo;s <b>Information Security team</b> is passionate in bringing progressive approaches in securing our products. We believe that security should empower innovation, move at the speed of business, and have safety by design as core principles. Our team&rsquo;s mission is to ensure the safety of our core product platforms, enterprise, and manage threats to Upstart. We approach our efforts through automation, strong collaboration with our partner teams, and maintaining a positive experience for Upstarters.</p>
<p>
As a <b>Detection Engineer</b> at Upstart, you will design security alerts and automated response playbooks for resolving those alerts. You&rsquo;ll share in the team&rsquo;s responsibility for monitoring and actively defending our corporate and product infrastructure. You'll be a key piece of our Incident Response process, on the front lines of keeping Upstart safe.</p><br>
<p></p>
<p><b>
Position location</b> This role is available in the following locations: Remote, San Mateo, Columbus, Austin, NYC</p>
<p><b>
Time zone requirements</b> The team operates on the East/West coast time zones.</p>
<p><b>
Travel requirements</b> As a digital first company, the majority of your work can be accomplished remotely. The majority of our employees can live and work anywhere in the U.S but are encouraged to to still spend high quality time in-person collaborating via regular onsites. The in-person sessions&rsquo; cadence varies depending on the team and role; most teams meet once or twice per quarter for 2-4 consecutive days at a time.</p><br>
<p></p>
<p><b>
How you&rsquo;ll make an impact:</b></p>
<ul>
<li>Design and build alerts and automated response playbooks to resolve those alerts</li>
<li>Work closely with system owners to ingest new log feeds for security monitoring</li>
<li>Build automated testing to verify the detection methods continue to work</li>
<li>Develop integrations between the SOAR tool and APIs</li>
<li>Be on the frontlines of Incident Response, actively investigating issues and protecting Upstart</li></ul><br>
<p></p>
<p><b>
What we&rsquo;re looking for:</b></p>
<ul>
<li>Minimum requirements:</li>
<ul><li>1+ years in a Detection Engineering or Incident Response role</li>
<li>Assume breach mindset, chasing down all threads to completion</li>
<li>Strong Log-fu (ability to build robust log search queries)</li>
<li>Intermediate proficiency in at least one programming language (preferably Python)</li>
<li>Strong git (rebasing doesn't scare you!)</li>
</ul><li>Preferred qualifications:</li>
<ul><li>AWS Experience &amp; Infra as Code management of resources</li>
<li>OSX Endpoint Investigation Experience</li>
<li>Internal Application Development Experience</li>
<li>SaaS Application security experience</li>
<li>Experience in a high-security environment</li>
<li>Experience with managing Threat Intelligence</li></ul></ul><p></p><div><div><br>
<div>
<p>At Upstart, your base pay is one part of your total compensation package. The anticipated base salary for this position is expected to be within the below range. Your actual base pay will depend on your geographic location&ndash;with our &ldquo;digital first&rdquo; philosophy, Upstart uses compensation regions that vary depending on location. Individual pay is also determined by job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process.</p>
<p>
In addition, Upstart provides employees with target bonuses, equity compensation, and generous benefits packages (including medical, dental, vision, and 401k).</p>
</div>
<div>United States | Remote - Anticipated Base Salary Range</div>
<div>$111,900&mdash;$155,000 USD</div>
</div></div><div>
<p><b>What you'll love</b></p>
<p>
At Upstart, our benefits are designed to support your health, financial well-being, family, and personal growth. Here&rsquo;s what you can expect:</p>
<ul>
<li>Competitive compensation, including base pay, bonus opportunities, and annual equity grants that vest quarterly</li>
<li>Generous 401(k) plan with Upstart matching $2 for every $1 contributed, up to $15,000 per year</li>
<li>Employee Stock Purchase Plan (ESPP) with discounted stock purchase options for eligible employees</li>
<li>Affordable medical, dental, and vision coverage, with multiple plan options - Upstart covers 90% to 100% of the cost depending on the plans you choose</li>
<li>Health Savings Account contributions from Upstart for eligible plans</li>
<li>Income protection benefits, including company-paid Basic Life, AD&amp;D, and Short- and Long-Term Disability coverage, with options to purchase supplemental coverage</li>
<li>Paid time off, sick and safe time, and company holidays</li>
<li>Paid family and parental leave to support caregiving and major life moments</li>
<li>Family-centered benefits through Carrot and Cleo, supporting fertility, parenthood, and caregiving</li>
<li>Employee Assistance Program (EAP) offering mental health support and life-centered resources</li>
<li>Financial wellness resources, including access to financial planning tools and a financial concierge service</li>
<li>Annual wellness allowance to support your physical and emotional well-being and personal development, based on what matters most to you</li>
<li>Annual productivity allowance to invest in relevant tools and resources you need to do your best work, no matter where you work from</li>
<li>Connection and community through team events and onsites, all-company updates, and employee resource groups (ERGs)</li>
<li>Onsite perks, including catered lunches and fully stocked micro-kitchens when working from one of our four offices, located in the Bay Area, Austin, Columbus, and New York City (opening Summer 2026!).</li>
</ul>
<p>Upstart is a proud Equal Opportunity Employer. Just as we are dedicated to improving access to affordable credit for all, we are committed to inclusive and fair hiring practices.</p>
<p><i>
If you require reasonable accommodation in completing an application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please email </i><b><i>candidate_accommodations@upstart.com</i></b></p>
<p><b>
https://www.upstart.com/candidate_privacy_policy</b></p></div></div>

Detection Engineer

Hitachi Rail

<div><p><b>About Us</b></p><p></p><p>
A career at Hitachi Rail will help create a legacy. With operations in every corner of the world, our work goes to the cutting-edge of digital transformation and technology. From the multi-cultural strength of our global organisation to the sustainable and innovative ways we work to bring people together, there&rsquo;s something for everyone to get stuck into. And that&rsquo;s where you come in.</p><p></p>
Cairo, Egypt (On-Site)<p></p><p><b>
Main Responsibilities:</b></p><ul><li>
Review and analyze project tender documents, including drawings, specifications, and bills of quantities (BOQs), to understand project requirements.</li><li>
Ability to count and verify systems and layouts from CAD Drawings.</li><li>
Develop and modify system design layouts, cable routing, and equipment locations based on project requirements and relevant codes (e.g., EN54, Egyptian code NFPA 72).</li><li>
Develop technical submittals, data sheets, and compliance statements to meet tender specifications.</li><li>
Prepare accurate and competitive technical and financial proposals for fire alarm systems. This includes material costing, labor estimation, and generating detailed BOQs.</li><li>
Mentor and collaborate with other local team members.</li><li>
Ensure all designs and proposals comply with local and international fire safety codes and standards.</li><li>
Ability to discuss with suppliers technically and get appropriate solutions.</li><li>
Provide technical support to the project team during the installation and commissioning phases.</li><li>
Attend meetings with clients, consultants, and contractors to discuss project progress and resolve technical issues (If any).</li></ul><p></p><p><b>
Experience, Skills and Qualifications Requisrments:</b></p><ul><li>
Bachelor&rsquo;s degree in Electrical or Electronics Engineering.</li><li>
6- 8 years of experience in Fire detection system for large-scale construction projects and systems.</li><li>
Strong understanding of EN54, NFPA72 and other international fire safety standards.</li><li>
Excellent analytical, problem-solving, and communication skills.</li><li>
Ability to work under pressure and manage multiple tasks simultaneously</li></ul><p></p><p>
Thank you for your interest in Hitachi Rail. If your application is of interest, we will be in contact. Please do not hesitate to discover more about us and our latest jobs at https://www.hitachirail.com/careers.</p><p><b><br>
At Hitachi Rail, there is a place for everyone. We welcome and value differences in background, age, gender, sexuality, family status, disability, race, nationality, ethnicity, religion, and world view. It is our commitment to create an inclusive environment - we are proud to be an equal opportunity employer.</b></p><p></p><p>
We would be delighted if you would be one of our followers at https://www.linkedin.com/company/hitachirail.</p><p></p>
#LI-MA1</div>

Senior Fire Detection Engineer

Crocs

<div></div><div><div><div><div><div>Requisition ID: 14011
</div></div></div></div><div><div><div><div>Job Location(s):
Broomfield, CO, US, 80021
</div></div></div></div><div><div><div><div>Time in Office: Hybrid
</div></div></div></div><div><div><div><div><div>At Crocs, Inc., every career offers a chance to make a real impact. No two journeys look the same. And that's exactly how we like it. Whether you&rsquo;re welcoming customers into our stores, collaborating with global teams at our headquarters, or keeping operations moving at our distribution centers, your impact is real and valued. At Crocs, Inc. you&rsquo;re not expected to fit a mold. You&rsquo;re encouraged to break it and create something better.</div><div></div><div><div><div><h2 class="jobSectionHeader"><b><br>
Overview</b></h2>
</div><div><p><b>
The Senior Information Security Engineer at Crocs, Inc.</b> will be responsible for leading detection engineering efforts for our SIEM and partnering with our Managed Security Service Provider (MSSP). This role will also help drive AI Security and Data Security Posture Management (DSPM) capabilities by improving visibility, controls, and monitoring across cloud, SaaS, and on-prem environments. The position involves developing advanced detection and monitoring, tuning and optimizing SIEM rules, collaborating with the SOC team to enhance threat detection and incident response, and strengthening the security posture of sensitive data and AI-enabled applications.</p></div></div><div><div><h2 class="jobSectionHeader"><b>
What You'll Do</b></h2>
</div><div><ul><li>Lead the design, implementation, and maintenance of advanced detection and monitoring mechanisms within the SIEM and related security platforms.</li>
<li>Partner with application, data, and platform teams to implement AI Security controls for AI-enabled applications and services (e.g., secure design reviews, threat modeling, monitoring, and guardrails).</li>
<li>Lead DSPM initiatives, including sensitive data discovery, classification, exposure analysis, and remediation tracking across cloud, SaaS, and on-prem data stores.</li>
<li>Develop, tune, and optimize SIEM rules and use cases to improve the accuracy and effectiveness of threat detection.</li>
<li>Collaborate with the SOC team and MSSP to enhance threat detection and response capabilities.</li>
<li>Integrate security telemetry (logs, events, and signals) from endpoint, cloud, SaaS, identity, data, and application sources into the SIEM to ensure comprehensive visibility and monitoring.</li>
<li>Conduct regular assessments of detection coverage and security posture (including data exposure and AI-enabled application monitoring) to identify and remediate gaps in visibility, controls, or performance.</li>
<li>Analyze and interpret security logs, alerts, and data posture findings to identify potential threats, misconfigurations, sensitive data exposure, and AI abuse patterns.</li>
<li>Conduct attack simulations and purple-team exercises to validate and improve detections for endpoint, identity, cloud, data, and AI-related threats.<br>
Review and apply threat intelligence to improve detections for emerging threats and vulnerabilities, including cloud, SaaS, data exfiltration, and AI/LLM-related attack techniques.</li>
<li>Develop and implement automation playbooks for SOAR to streamline and enhance incident response processes, including data exposure/exfiltration scenarios and AI-related alerts.</li>
<li>Provide guidance and mentorship to junior security engineers and SOC analysts on detection engineering and incident response best practices.</li>
<li>Manage ticket queues, handle escalations, and review operational metrics to ensure the effectiveness of detection and response efforts.</li>
<li>Maintain strong communication with partners, including senior management, to report on detection capabilities and security incidents</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>What You'll Bring to the Table</b></h2>
</div><div><ul><li>Bachelor&rsquo;s degree or equivalent experience in computer science, information security, or a related field preferred; certifications such as CISSP, GIAC, or similar are preferred.</li>
<li>9+ years of experience in IT and information security roles, with a focus on detection engineering and SIEM management.</li>
<li>In-depth knowledge of SIEM platforms and experience with rule development and optimization.</li>
<li>Experience working with MSSPs and SOC teams to enhance detection and response capabilities.</li>
<li>Hands-on experience with DSPM and/or data security capabilities, such as data discovery and classification, exposure analysis, data access governance, and remediation workflows; familiarity with data governance and privacy principles and how they apply to sensitive data handling and AI use cases.</li>
<li>Experience with AI Security concepts and practices, including securing AI-enabled applications, understanding common AI/LLM risks (e.g., prompt injection, data leakage), and implementing monitoring/guardrails.</li>
<li>Solid understanding of log management, correlation, analysis, and security telemetry across endpoint, identity, cloud, SaaS, and data platforms.</li>
<li>Experience with integrating various log sources into SIEM platforms.</li>
<li>Knowledge of security frameworks and standards, including NIST, ISO/IEC 27001, and PCI-DSS.</li>
<li>Proficiency with security tools and technologies across endpoint, network, cloud, and data protection domains (e.g., EDR, IDS/IPS, firewalls, CASB/SSE, DLP).</li>
<li>Advanced knowledge of Windows and Linux operating systems and their security configurations.</li>
<li>Strong analytical and problem-solving skills with the ability to interpret complex security data.</li>
<li>Superb communication and collaboration skills, with the ability to simplify technical concepts for non-technical partners.</li>
</ul></div></div></div><p>
The Company is an Equal Opportunity Employer committed to a diverse and inclusive work environment. We accept applications on an ongoing basis.</p><br>
<p></p>
<p>
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or disability, or any other classification protected by law.</p><br>
<p></p>
<p>
Title: Sr. Information Security Engineer</p>
<p>
Salary or Pay Range: $150,000 - $160,000</p>
<p>
Pay offered will vary based on job-related factors such as location, experience, training, skills, and abilities.</p><br>
<p></p>
<p>
At Crocs, Inc. we believe in the power of a blend of in-person and virtual collaboration to drive creativity and strengthen relationships. Your participation in this flexible schedule plays a key role in building a connected and successful team. In-office requirements vary by our work personas: Resident (5 days), Collaborator (4 days), Connector (2-3 days), Explorer (fully remote). This role has been aligned to the Collaborator persona.</p><br>
<p></p>
<p>
This position is eligible to participate in a company incentive program.</p><br>
<p></p>
<p>
This position is eligible for company benefits including but not limited to medical, dental, and vision coverage, life and AD&amp;D, short and long-term disability coverage, paid time off, employee assistance, participation in a 401k program that includes company match, and many other additional voluntary benefits.</p><br>
<p></p>
<p><i>
The application window is 45 days, but applicants are encouraged to apply as soon as possible after the posting date in order to ensure optimal consideration. The posting will be removed if the job is filled before the application window deadline.</i></p>
<p>
Job Category: Corporate</p><br>
</div></div></div></div><p><br>
<b>Nearest Major Market: </b>Denver</p></div>

Sr. Information Security Engineer

Copia Automation

<div><div><p><b>About Copia</b></p>
<p>
Copia Automation builds the version control and change management platform for industrial automation. Our customers are in oil &amp; gas, manufacturing, and critical infrastructure &mdash; environments where the code running on PLCs, SCADA systems, and HMIs has direct safety implications. We bring modern software engineering practices to operational technology teams that have been underserved by tooling for decades.</p>
<p>
We&rsquo;re a well-funded startup growing fast, with enterprise customers deploying Copia across hundreds of facilities. Our headquarters is in New York City.</p>
<p><b>
The Role</b></p>
<p>
We&rsquo;re hiring a Lead Security Engineer to mature Copia&rsquo;s security engineering program. You&rsquo;ll work closely with our CISO and report into engineering leadership.</p>
<p>
This is not a siloed role. You&rsquo;ll be the person responsible for detection engineering on Monday, IAM architecture on Tuesday, compliance evidence on Wednesday, and incident response whenever it&rsquo;s needed. We need someone who can context-switch across security domains and knows which problem to prioritize on any given day.</p>
<p>
You should be comfortable building a security program, not just operating one someone else designed. If you&rsquo;ve been the first or second security engineer at a startup before, you know exactly what this means.</p>
</div>
<h3 class="jobSectionHeader"><b>What you'll own:</b></h3><div>
<ul><li><b>Detection Engineering &amp; Incident Response: </b>Build, tune, and maintain detection pipelines and alerting. Run incident investigations and root-cause analysis. Drive toward full visibility and monitoring coverage across cloud and endpoint assets.</li>
<li><b>Cloud &amp; Infrastructure Security: </b>Secure our AWS environment &mdash; IAM policies, network segmentation, container security, secrets management. Codify security guardrails in infrastructure-as-code. Review architecture decisions with engineering for security impact.</li>
<li><b>Enterprise Identity &amp; Cloud Access: </b>Architect and manage identity infrastructure across cloud and SaaS environments &mdash; IdP configuration, SSO/OIDC integration, SCIM provisioning, conditional access policies, and RBAC design. Own the full identity lifecycle from onboarding to offboarding, enforce least-privilege across AWS accounts and SaaS applications, and drive access certification and governance programs.</li>
<li><b>Security Automation: </b>Automate everything you can &mdash; alert triage, access provisioning, evidence collection, vulnerability management workflows. You&rsquo;re one person covering a lot of ground; automation is how you scale.</li>
</ul></div><h3 class="jobSectionHeader"><b>What we're looking for:</b></h3><div>
<p>
7+ years of experience in security engineering, with hands-on work across multiple security domains. You&rsquo;ve ideally done this at a SaaS company or cloud-native startup where you couldn&rsquo;t hide behind a large team.</p>
<ul>
<li>Strong detection engineering skills &mdash; you&rsquo;ve built and tuned SIEM rules, written detection content, and investigated real alerts, not just monitored dashboards someone else built</li>
<li>Deep understanding of AWS security architecture &mdash; IAM, VPC design, multi-account strategies, and native security services</li>
<li>Proficiency with infrastructure-as-code for security &mdash; codifying policies, guardrails, and configurations rather than clicking through consoles</li>
<li>Experience with identity and access management architecture &mdash; IdP configuration, SSO/OIDC, RBAC design, and access lifecycle automation</li>
<li>Scripting and automation chops in Python, Bash, or PowerShell for security operations, orchestration, and evidence workflows</li>
<li>Clear, direct communication skills &mdash; you can explain a risk to an engineer, write a post-incident report for leadership, and answer a customer security questionnaire without corporate fluff</li>
</ul>
<div><p><b>Bonus Points</b></p>
<ul>
<li>Experience with CrowdStrike Falcon (EDR + LogScale/NG-SIEM) or Datadog Security Monitoring</li>
<li>Terraform expertise, including module development and policy-as-code (OPA, Sentinel)</li>
<li>Familiarity with fleet management tools (FleetDM, osquery, Jamf, or Intune)</li>
<li>Exposure to OT/ICS security concepts, industrial control systems, or critical infrastructure environments</li>
<li>Experience with EU regulatory frameworks &mdash; NIS2, Cyber Resilience Act, IEC 62443</li>
<li>Background in vulnerability management lifecycle &mdash; scanning, triage, remediation tracking, and executive reporting</li>
<li>Experience implementing Zero Trust Network Access (ZTNA) in hybrid cloud/on-prem environments</li>
</ul></div></div><div>Benefits include unlimited PTO, employer-subsidized healthcare through Aetna, commuter benefits, in-office lunches, and more! <b>Full-time, permanent employees also receive generous equity packages.</b></div>
<h3 class="jobSectionHeader"><b>**This position is hybrid out of our New York City HQ.**</b></h3><div>
<p><b>
Why Copia</b></p>
<ul>
<li>Your work has real-world safety impact. Our customers run critical infrastructure. Security here isn&rsquo;t an abstract compliance exercise &mdash; it matters.</li>
<li>You&rsquo;ll build, not just maintain. This is a greenfield opportunity to shape the security program at a company that&rsquo;s scaling fast.</li>
<li>No bureaucracy. You&rsquo;ll work directly with engineering and leadership. Your recommendations get implemented, not lost in committee.</li>
<li>Competitive equity. Full-time permanent employees receive meaningful ownership in a company with significant upside.</li></ul></div></div>

Lead Security Engineer

Goldman Sachs

<div><div><div><div><div><div><div><p><b>Role Overview</b></p>
<p>
As a Data Loss Prevention (DLP) Engineer, you will play a pivotal role in protecting the firms most sensitive data. You will be responsible for the end-to-end lifecycle of our DLP program &ndash; from developing and turning detection rules to analyzing complex DLP events. Beyond traditional DLP operations, this role requires a strong automation mindset. You will leverage SOAR capabilities and ServiceNow to automate workflows, streamline case management and automate review activities across modern security stack (Microsoft Purview, Defender, Zscaler, Proofpoint) as well as internally developed systems.</p><br>
<p></p>
<p><b>
Key Responsibilities</b></p>
<ul><li>
Design, implement and continuously tune DLP detection capabilities and policies across Microsoft Purview, Zscaler, Proofpoint to maximize true positives and minimize operational friction</li><li>
Develop custom detection logic and integrations for internally developed systems</li><li>
Perform regular testing and validation of existing DLP controls to identify coverage gaps and bypass techniques</li><li>
Engineer automation workflows to assist DLP analysts, reducing manual review time and automating the triage of low-fidelity events</li><li>
Act as highest-level technical escalation point for complex data leakage incidents and associated investigations</li><li>
Collaborate directly with data owners, legal and compliance teams to translate business and regulatory requirements into technical enforcement rules</li><li>
Evaluate and integrate additional DLP tools, and participate in proof-of-concept trials.</li></ul><br>
<p></p>
<p><b>
Required Technical Skills</b></p>
<ul><li><b>
DLP &amp; Security Operations: </b>Proven experience handling data loss incidents, insider threat investigations, or general security incident response. You need to know what a good alert looks like to build one</li><li><b>
Core Stack Expertise:</b> Deep, hands-on administrative experience with tools like Microsoft Purview, Zscaler, ServiceNow and Proofpoint</li><li><b>
Automation &amp; Scripting</b>: Strong proficiency in tools like Python or PowerShell. You must be able to interact with REST APIs to pull logs, enrich alerts, and trigger automated response actions</li><li><b>
Detection Engineering:</b> Proficiency with regular expressions, exact data matching, indexed document matching and custom dictionary creation</li><li><b>
System Architecture:</b> Solid understanding of enterprise network routing, proxies, cloud access, and mail transport rules</li></ul><br>
<p></p>
<p><b>
What Sets You Apart</b></p>
<ul><li>
Experience integrating DLP tooling with SOAR platforms (e.g., Splunk SOAR, Cortex XSOAR, Tines) to build end-to-end automated review pipelines</li><li>
Background in software engineering or DevSecOps, with an understanding of CI/CD pipelines and version control for managing detection as code</li><li>
A &ldquo;builder&rdquo; mindset: you prefer to solve problems with code rather than relying solely on out-of-the-box vendor configurations</li><li>
Applied AI/ML in Detection Engineering &ndash; experience moving beyond static rules by training, tuning and deploying ML classifiers for context-aware data discovery. Familiarity with Microsoft Purview&rsquo;s Trainable Classifiers or using custom Natural Language Processing models to identify sensitive data types that traditional regex approach misses</li><li>
Agentic workflow automation: experience building next-generation, LLM-driven &ldquo;agentic&rdquo; workflows. You have moved beyond basic SOAR playbooks and built autonomous systems where AI agents gather contextual telemetry, interact directly with employees (e.g, via MS Teams bots, email, task management systems) to verify business intent, and pre-triage alerts before they are manually reviewed</li></ul></div></div></div></div></div></div><div><div><div><div><div><b>
We Offer Best-In-Class Benefits</b></div></div></div><p></p><div><div><div><div><div><div><div>
Healthcare &amp; Medical Insurance</div></div><p>
We offer a wide range of health and welfare programs that vary depending on office location. These generally include medical, dental, short-term disability, long-term disability, life, accidental death, labor accident and business travel accident insurance.</p></div></div></div></div><p></p><div><div><div><div><div><div>
Holiday &amp; Vacation Policies</div></div><p>
We offer competitive vacation policies based on employee level and office location. We promote time off from work to recharge by providing generous vacation entitlements and a minimum of three weeks expected vacation usage each year.</p></div></div></div></div><p></p><div><div><div><div><div><div>
Financial Wellness &amp; Retirement</div></div><p>
We assist employees in saving and planning for retirement, offer financial support for higher education, and provide a number of benefits to help employees prepare for the unexpected. We offer live financial education and content on a variety of topics to address the spectrum of employees&rsquo; priorities.</p></div></div></div></div><p></p><div><div><div><div><div><div>
Health Services</div></div><p>
We offer a medical advocacy service for employees and family members facing critical health situations, and counseling and referral services through the Employee Assistance Program (EAP). We provide Global Medical, Security and Travel Assistance and a Workplace Ergonomics Program. We also offer state-of-the-art on-site health centers in certain offices.</p></div></div></div></div><p></p><div><div><div><div><div><div>
Fitness</div></div><p>
To encourage employees to live a healthy and active lifestyle, some of our offices feature on-site fitness centers. For eligible employees we typically reimburse fees paid for a fitness club membership or activity (up to a pre-approved amount).</p></div></div></div></div><p></p><div><div><div><div><div><div>
Child Care &amp; Family Care</div></div><p>
We offer on-site child care centers that provide full-time and emergency back-up care, as well as mother and baby rooms and homework rooms. In every office, we provide advice and counseling services, expectant parent resources and transitional programs for parents returning from parental leave. Adoption, surrogacy, egg donation and egg retrieval stipends are also available.</p></div></div></div></div><p></p><div><div><div><div><div><div>
Benefits at Goldman Sachs</div></div><p>
Read more about the full suite of class-leading benefits our firm has to offer.</p></div></div></div></div></div></div></div></div><div></div>
<br><p>Opportunity Overview
CORPORATE TITLE
Vice President
OFFICE LOCATION(S)
Dallas
JOB FUNCTION
Security Engineering
DIVISION
Engineering Division</p>

Engineering-Dallas-Vice President-Data Loss Prevention Engineer

MERCOR

<div><h2 class="jobSectionHeader"><b>About the Role</b></h2><p>
You&rsquo;ll work on security across a platform that processes large volumes of sensitive data, including AI training pipelines, expert payments, and enterprise integrations. This is a hands-on engineering role focused on building and improving the systems that keep Mercor secure.</p><p>
We use AI heavily in our own security work. You should be comfortable building alongside AI code-gen tools, using LLMs to accelerate threat analysis, and automating away the repetitive work that slows security teams down. If you're the kind of engineer who writes a script instead of filing a ticket, you'll fit in here.
</p><p>We're in-person five days a week at our San Francisco headquarters, with first Fridays remote. New York could be an option for the right candidate.</p><p></p><h2 class="jobSectionHeader"><b>
What You'll Build:</b></h2><ul><li><p>
Detection and response pipelines that catch real threats, not checkbox alerts</p></li><li><p>
Security automation that replaces manual processes - if you're doing something twice, automate it</p></li><li><p>
Infrastructure hardening across AWS, Kubernetes, and our production environment</p></li><li><p>
Identity and access controls for a platform serving 300K+ experts and enterprise clients</p></li><li><p>
Application security tooling integrated into CI/CD - shifting security left without slowing down deploys</p></li><li><p>
Incident response runbooks and tooling - when something breaks, you'll own the fix end-to-end</p></li></ul><h2 class="jobSectionHeader"><b>
What We're Looking For</b></h2><ul><li><p>
You've built security tooling or automation in a previous role - not just operated existing tools</p></li><li><p>
Strong in Python, Go, or TypeScript - you ship code, not slide decks</p></li><li><p>
Experience hardening cloud infrastructure (AWS preferred) - VPCs, IAM, container security</p></li><li><p>
You understand application security at the code level - can review a PR for auth bugs, not just run a scanner</p></li><li><p>
Comfortable with detection engineering - writing rules, tuning alerts, reducing noise</p></li><li><p>
You've done incident response and know what it means to be on-call when things break</p></li><li><p>
5+ years of professional experience in security engineering, software engineering, or a related builder role</p></li></ul><h2 class="jobSectionHeader"><b>
Bonus Points</b></h2><ul><li><p>
Experience at a high-growth startup or fast-moving engineering org</p></li><li><p>
Familiarity with AI/ML security - model access controls, training data protection, prompt injection</p></li><li><p>
Offensive security skills - pen testing, bug bounty, red team experience</p></li><li><p>
Contributions to open source security tools</p></li><li><p>
You've built something from scratch that a team still uses</p></li></ul><h2 class="jobSectionHeader"><b>
Why Mercor</b></h2><ul><li><p>
Build, don't babysit. We automate the boring stuff. You'll spend your time building systems, not reviewing access requests.</p></li><li><p>
AI-native security. You'll use frontier AI tools daily - for code review, threat analysis, detection writing, and anything that benefits from an AI co-pilot.</p></li><li><p>
Ownership from day one. You'll own meaningful security surface area, not a single dashboard.</p></li><li><p>
See the future early. Working alongside AI labs means you'll understand frontier model capabilities months before the market.</p></li></ul><p>
Compensation Range: $130K - $500K</p></div>

Security Engineer

Octdaily

<div>
 <p>
  Job Description:
 </p>
 <ul>
  <li>
   Design, deploy and optimize Microsoft Sentinel for SIEM and SOAR capabilities.
  </li>
  <li>
   Develop and implement advanced detection use cases aligned with MITRE ATT&amp;CK framework.
  </li>
  <li>
   Monitor and analyze security events across endpoint, network, identity, database and DevOps environments.
  </li>
  <li>
   Build and fine tune KQL based detection rules and threat hunting queries.
  </li>
  <li>
   Identify threats such as lateral movement, command and control activity, suspicious sign ins and data exfiltration.
  </li>
  <li>
   Design and implement security policies and monitoring strategies based on business risk.
  </li>
  <li>
   Integrate Microsoft Defender XDR, Azure services and third party security tools.
  </li>
  <li>
   Develop and manage SOAR playbooks using Logic Apps for automated response.
  </li>
  <li>
   Implement Data Loss Prevention using Microsoft Purview and manage endpoint security via Intune.
  </li>
  <li>
   Work on DevSecOps integrations including Azure DevOps, APIs and Infrastructure as Code.
  </li>
  <li>
   Deploy and manage on premise SIEM solutions such as Wazuh in hybrid environments.
  </li>
  <li>
   Ensure continuous improvement of detection capabilities and security posture.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  Requirements:
 </p>
 <ul>
  <li>
   3 to 4 years of relevant experience in SIEM or cybersecurity roles.
  </li>
  <li>
   Strong hands on experience with Microsoft Sentinel and KQL.
  </li>
  <li>
   Expertise in Microsoft Defender XDR including Endpoint, Identity, O365 and Cloud.
  </li>
  <li>
   Experience in SIEM implementation, detection engineering and policy design.
  </li>
  <li>
   Solid understanding of network security, endpoint telemetry and cloud security.
  </li>
  <li>
   Familiarity with MITRE ATT&amp;CK framework.
  </li>
  <li>
   Experience with automation, DevOps security and API integrations.
  </li>
  <li>
   Strong analytical, problem solving and communication skills.
  </li>
 </ul>
 <p>
 </p>
</div>


Siem Engineer

Search 5466+ Detection engineer jobs near you this April. New roles added regularly across leading industries. Apply today.