threat detection engineer

Key Responsibilities

• Work across a diverse information security domain, with a strong focus on threat detection, response, and security telemetry across infrastructure, cloud, and data.
• Identify and investigate security threats (internal and external), partner with stakeholders on remediation, and design preventive controls for recurring or systemic issues.
• Design, build, and continuously improve high-fidelity detection use cases across cloud, endpoint, identity, and network telemetry.
• Formulate new detection ideas based on adversary research, emerging attack techniques, industry incidents, and threat intelligence.
• Lead and participate in incident response, performing root-cause analysis and driving preventive improvements post-incident.
• Develop and enhance CRED’s detection, monitoring, and response capabilities.
• Automate incident response workflows using playbooks and orchestration to reduce manual effort.
• Build in-house security analytics solutions using open source tools (log parsing, event correlation, and threat detection).
• Conduct threat hunting operations using known adversary tactics, techniques, and procedures to detect advanced threats.
• Assist with creating security awareness and maintaining a prudent security engineering culture.
• Enable compliance in teams and help them achieve industry best practices (e.g., PCI DSS, ISO 27001).

Requirements & Tech Stack

• Hands-on experience detecting and responding to threats across cloud (AWS preferred), endpoint (Windows/Linux/macOS), and network telemetry.
• Exposure to EDR, IDS/IPS, and SIEM / centralized logging platforms (Splunk, ELK, Sentinel, or similar), including building high-fidelity detection pipelines.
• Proficiency in at least one programming or scripting language (Python, Go, or Bash).
• Solid understanding of MITRE ATT&CK, cyber kill chain, and diamond model.
• Ability to design and tune detection rules using MITRE ATT&CK and threat intelligence with a focus on signal quality.
• Experience with threat hunting, automation and enrichment, regex creation, and false-positive reduction.
• Experience handling the complete incident response lifecycle, from detection through remediation and reporting.
• Proactive approach to staying current with security news, breach reports, tools, and attacker research.
• Strong learning agility and passion for exploring diverse security domains, demonstrated via GitHub, blogs, research, or talks.
• Exposure to the AI-driven threat landscape, digital forensics, or malware analysis is a strong plus.

Qualifications

• 2 to 6 years of experience in information security with a strong focus on threat detection and response.
• Strong data-driven mindset with the ability to influence both technical and non-technical stakeholders.
• Ability to act as a go-to person, communicating clearly with engineering, product, and business teams.