Security Detection Engineer

The role

You will design, build, and scale high-signal detections across cloud, identity, endpoint, network, and application layers. You will strengthen detection capabilities to safeguard biometric and health data.

What you will do

• Design, build, and scale high-signal detections using Detection-as-Code principles.
• Develop and maintain detection logic aligned to attacker behavior and frameworks like MITRE ATT&CK.
• Translate threat intelligence into actionable detections and validate through adversary emulation.
• Build behavioral detections against account takeover, credential abuse, API misuse, and other threats.
• Improve detection quality by tuning alerts and reducing false positives.
• Define and track detection KPIs.
• Support and lead incident investigations including containment and root cause analysis.
• Contribute to the on-call rotation.
• Partner with Engineering, IT, Infrastructure, Product, and GRC.
• Map detections to threat models and identify visibility gaps.

Required qualifications

• 4+ years of hands-on experience in Information Security, focusing on detection engineering, threat detection, or security operations.
• Demonstrated experience writing and tuning detections across cloud, identity, endpoint, or application environments.
• Familiarity with detection frameworks and tooling such as YARA, SIGMA, Suricata, or similar rule-based detection methodologies.
• Strong understanding of attacker techniques across identity compromise, cloud abuse, lateral movement, and data exfiltration.
• Expertise analyzing and building detections on cloud and SaaS telemetry, including authentication events, API activity, and system logs.
• Strong scripting skills in a scripting language such as Python, Go, or PowerShell.
• Ability to operate effectively in a fast-paced, high-growth environment.
• Strong analytical mindset with a systems-thinking approach.
• Experience supporting incident response investigations and participating in on-call rotations.

Nice to have

• Experience building detective controls for consumer-facing platforms or detecting authentication and API abuse at scale
• Familiarity with applying data analysis or machine learning techniques to security detection or alert triage
• Bachelor’s degree in Computer Science, Information Security, or a related technical field
• Relevant security certifications

Benefits

• base salary
• generous equity package

About the company

WHOOP empowers members to perform at a higher level through a deeper understanding of their bodies and daily lives. The company is on a mission to unlock and inspire performance for life.