Develop and operate detection and response capabilities across enterprise, cloud, and product environments. Responsibilities include building detections-as-code, triaging alerts, leading incident response and forensic investigations, threat hunting, automating workflows, maintaining SIEM and security data pipelines, developing AI-enabled security tooling, and participating in on-call rotations. The role also involves threat intelligence collaboration, security engineering mentorship, and continuous improvement of detection and response systems.

Build and maintain scalable security observability, detection, and response systems. Develop AI- and ML-based detections, normalize large-scale security logs, automate incident workflows, respond to alerts and threats, conduct investigations and threat hunts, and participate in detection and response on-call rotations.