On a typical day, you might:
- Design and deploy sophisticated detection logic across our entire technology stack using detection-as-code principles like YARA-L, Sigma, and KQL.
- Build automated response workflows that independently enrich, triage, and remediate security alerts, effectively eliminating manual toil through advanced SOAR principles.
- Investigate complex security signals—such as novel attack patterns or phishing campaigns—that require deep human judgment and strategic intuition.
- Collaborate cross-functionally with DevOps and Security Engineering teams to adapt detection logic to infrastructure changes before security blind spots can emerge.
- Leverage AI and LLMs as force multipliers to accelerate threat hunting, generate new detection hypotheses, and automate repetitive investigative tasks.
- Lead post-incident reviews with engineering partners, transforming security findings into preventative architectural changes that harden our long-term defense.
- Prototype and test emerging detection capabilities and data sources, ensuring we stay ahead of the threat landscape while participating in an on-call rotation to defend our most critical systems.
What is needed:
- 5+ years of hands-on experience in detection engineering, incident response, or security operations within high-growth technology environments.
- Advanced programming proficiency in Python, with a proven ability to build production-quality security automations and custom integrations from scratch.
- Deep expertise in Cloud Security (AWS), including a comprehensive understanding of IAM, VPC, CloudTrail, and Lambda attack vectors.
- Mastery of detection logic in at least two major languages, such as YARA-L, Sigma, KQL, or SPL.
- A track record of building SOAR workflows or equivalent automation platforms that measurably reduce operational overhead at scale.
- Exceptional communication skills, with the ability to distill complex security risks into actionable insights and influence technical decisions across the organization.
- Experience using AI/LLMs as a strategic tool for threat analysis, investigation automation, and increasing the velocity of security work.
- A self-directed, engineering-first mindset, ideally with a background in SRE, DevOps, or platform engineering and a history of contributing to open-source security projects.
Top Skills
What We Do
ActiveCampaign helps small teams power big businesses with the must-have platform for intelligent marketing automation. Customers from over 170 countries depend on ActiveCampaign’s mix of pre-built automations and integrations (including Facebook, Google, WordPress, Salesforce, Shopify, and Square) to power personalized marketing, transactional emails, and one-to-one CRM interactions throughout the customer lifecycle.
ActiveCampaign holds the highest customer satisfaction rating among Marketing Automation, E-Commerce Personalization, Landing Page Builders, and CRM solutions on G2.com and is one of only a handful of software solutions with over 10,000 positive reviews. ActiveCampaign has also been named the Top Rated Email Marketing Software on TrustRadius. Learn more and start your free trial at ActiveCampaign.com.
Why Work With Us
We are focused on our employees, our customers, and even our customer's customers. Ideas are valued over titles, contributions are valued over appearances, helping a co-worker is more important than outshining them. We are passionate about diversity and inclusion, believing everyone has a voice and can make a difference.
Gallery








