Security Engineer, Detection and Response

The role

The Detection and Response Engineer builds detections, hunts, and automations to protect cloud infrastructure, crypto systems, endpoints, and network. You will write detections as code, automate response, and perform purple team exercises to validate coverage.

What you will do

• Ship production-grade detections as code with measurable signal improvements
• Run purple team exercises to confirm detection effectiveness and identify blind spots
• Execute proactive threat hunts based on threat intelligence
• Convert hunt findings into new detections and documented IOCs/TTPs
• Build automations to accelerate investigation and triage
• Create and maintain runbooks and incident write-ups
• Identify gaps and integrate tools to increase visibility across endpoints, cloud, network, and signing systems
• Participate in an on-call rotation

Required qualifications

• 3+ years of experience in security operations, detection engineering, offensive security testing, or a related security engineering role
• Hands-on experience investigating and responding to security threats across endpoints, cloud environments, and network telemetry
• Experience using SIEM, EDR, and ticketing systems
• Experience tuning detections in SIEM and EDR platforms
• Experience using adversary-emulation or purple-team tooling
• Ability to use scripting (Python/Bash) to speed up investigations

About the company

Paxos builds blockchain infrastructure that tokenizes, custodies, trades and settles assets for leading financial institutions. They are on a mission to open the world's financial system by enabling the instant movement of any asset.