Threat Detection Response Engineer

Threat detection and incident response engineering define this onsite role at True Anomaly, requiring an active security clearance and security operations expertise.

As a Threat Detection & Response Engineer III, you will build detection capabilities, response processes, and security tooling. You will design custom detections, investigate incidents, and strengthen a growing security operations program. The position is onsite in Denver or Long Beach, with on-call participation required.

Key Responsibilities:

• Develop incident response plans, playbooks, and scalable standard operating procedures
• Design and tune detections across corporate and cloud environments
• Monitor, triage, investigate, contain, and recover from incidents
• Administer EDR and SIEM platforms and integrate log sources
• Build automation workflows and communicate findings across teams

Requirements:

• Active Secret or Top Secret security clearance
• Three-plus cybersecurity years, including two focused years
• Experience building or tuning security detections
• Familiarity with EDR, SIEM, endpoint security, and attack techniques
• Python, PowerShell, or Bash scripting experience

Use detection engineering, incident response, threat hunting, and security automation skills supporting True Anomaly’s security program.

#J-18808-Ljbffr