Detection Engineer

The role

You will own detection content that powers the Artemis platform. You will design, build, test, and tune high-fidelity detections across cloud, identity, endpoint, and SaaS environments using detection-as-code and AI.

What you will do

• Build and maintain the detection library across cloud, identity, endpoint, and SaaS log sources
• Practice detection-as-code using version-controlled rules, peer review, and CI/CD
• Measure and close detection coverage gaps against MITRE ATT&CK
• Build and run attack simulations to validate detections
• Tune false-positive and false-negative rates across the fleet
• Use AI to author, convert, test, and document rules at scale
• Build behavioral and anomaly-based detections
• Engineer detections to produce rich, structured context for AI-powered investigation
• Translate threat intelligence and incident findings into behavioral detection logic
• Partner with SOC and research teams to drive detection improvements

Required qualifications

• 5+ years of hands-on cybersecurity experience, with significant time in detection engineering
• Proven track record designing, building, and tuning detections at scale across SIEM, EDR, or custom detection platforms
• Strong proficiency in detection languages and formats such as Sigma, KQL, SPL, or YARA-L
• Comfort writing code (Python preferred) for automation and testing
• Deep knowledge of attacker tactics, techniques, and procedures (MITRE ATT&CK)
• Experience with detection-as-code workflows: Git, peer review, automated testing, and CI/CD
• Experience using AI tools to accelerate detection authoring, tuning, or validation
• Experience building behavioral or anomaly-based detections
• Strong log-analysis skills
• Clear written and verbal communication

Nice to have

• Experience in an MDR, MSSP, or high-volume SOC environment
• Experience with attack simulation and validation frameworks (Atomic Red Team, purple teaming)
• Background in threat hunting or incident response across cloud environments
• Experience with UEBA platforms or statistical/ML-based detection methods
• Experience building AI-assisted detection or investigation tooling from scratch
• Contributions to open-source detection content or the broader detection engineering community

Benefits

• Top-of-market equity component

About the company

Artemis is building the future of AI-driven cybersecurity, helping companies defend themselves with a platform that uses AI agents to detect, investigate, hunt, and respond to threats.