We're looking for a Senior Security Engineer to join our globally distributed, high-impact security engineering team. You will design and implement detection logic, investigate alerts, and automate response mechanisms. As an early hire, you'll work closely with our platform and AI teams to shape how autonomous threat detection and response is built and delivered at scale.
Responsibilities:
- Lead Investigations: Triage, analyze, and respond to alerts across cloud, endpoint, and network environments with automation-first principles.
- Build Detections: Write detection logic and behavioral rules as code that is clear, testable, and scalable.
- Automate Response Workflows: Develop Go-based automation for enrichment, containment, and remediation playbooks.
- Define Detection-as-Code Practices: Implement a detection and response framework with strong engineering fundamentals (testing, CI/CD, version
- control).
- Collaborate Across Functions: Partner with platform and AI teams to integrate detection logic into the broader Daylight stack.
- Support DFIR: Participate in incident investigations and post-incident reviews; DFIR skills (memory, disk, or cloud forensics) are a strong plus.
- Security Operations Experience: 3+ years in detection engineering, incident response, or blue team roles.
- Automation Mindset: You automate what others manually repeat. Experience building or integrating automated response systems is key.
- Cloud-Native Awareness: Familiarity with detecting and responding to threats in cloud environments (AWS, GCP, or Azure).
- DFIR Skills: Practical experience in digital forensics and incident response — logs, memory, containers, cloud.
- Threat-Informed Thinking: Comfort with attacker tactics and techniques (MITRE ATT&CK, behavioral detection, threat modeling).
Skills Required
- 3+ years in detection engineering, incident response, or blue team roles
- Experience building or integrating automated response systems
- Familiarity with detecting and responding to threats in cloud environments
- Practical experience in digital forensics and incident response
- Comfort with attacker tactics and techniques (MITRE ATT&CK)
What We Do
Security environments have changed. Traditional services can't keep up. Daylight solves this by combining an AI-native platform with top security experts from IR and threat hunting backgrounds. We deliver Managed Agentic Security Services (MASS), which includes 24/7 MDR, threat hunting, managed phishing investigation & response, managed DLP, and incident response.
