Your browser does not support javascript! Please enable it, otherwise web will not work for you.

Senior Detection Engineer

Home > Python programming jobs

Senior Detection Engineer in Others new

  • SentinelOne
  • Full time
  • Email
  • India (city not specified)

Responsibilities

  • Create, own, and package behavioral detection rules across EDR, XDR, cloud, and network data sources.
  • Correlate detections across third-party sources and over time.
  • Translate threat hunts and research findings into production detections or document detection limitations.
  • Validate rules against real or laboratory telemetry, measure noise, and confirm true positives before release.
  • Analyze false positives and tune detection rules to improve accuracy.
  • Respond to customer escalations and false-positive reports.
  • Review pull requests and provide actionable technical feedback and documentation.
  • Collaborate with research, product management, and data-pipeline teams on coverage priorities and quarterly roadmaps.

Requirements

  • At least 4 years of experience in detection engineering, threat detection, SOC engineering, or a related security role.
  • Experience writing behavioral detection rules for SIEM, EDR, XDR, or similar platforms using query languages such as S1QL/SDL, Sigma, KQL, or SPL.
  • Familiarity with the MITRE ATT&CK matrix and mapping adversary techniques to observable behavior.
  • Strong log analysis skills across Windows, Linux, and network telemetry, including distinguishing findings from logging artifacts.
  • Proficiency in scripting and programming, with Python preferred, and comfort with Git and pull-request workflows.
  • Experience with detection engineering processes, research and development backlog prioritization, unit and integration testing, and CI/CD workflows.
  • Knowledge of cybersecurity frameworks, threat intelligence, and industry best practices.
  • Clear written communication, collaborative working style, ownership, and strong analytical and problem-solving skills.
  • Preferred qualifications include cybersecurity product detection experience, SOC or alert-triage experience, YARA experience, cloud and SaaS log experience, threat research or hunting experience, detection test automation, familiarity with MITRE ATT&CK Evaluations, and use of AI coding assistants.

Benefits

  • Restricted Stock Units and an Employee Stock Purchase Plan.
  • Competitive leave benefits and gender-neutral parental leave.
  • Medical and insurance benefits, plus an Employee Assistance Program.
  • Global home office allowance, internet allowance, LinkedIn Learning license, and Social Connect program.
  • Food allowance for the Bangalore office, meal vouchers, and a health and wellness benefit.

Salary: Competitive

SentinelOne

SentinelOne provides autonomous security solutions built on AI to protect organizations across endpoint, cloud, and identity environments. Our platform unifies threat prevention, detection, response, and forensics in a single, user-friendly system, enabling businesses to safeguard their assets ag...

Similar positions

Software Engineer Intern

  • Motorola Solutions
  • Full time
  • Others
  • 11/13/2026
  • George Town, Malaysia

Senior Software Engineer

  • Truv by Checkr
  • Full time
  • Remote
  • 11/13/2026
  • Salary: Competitive
  • Armenia, Cyprus

AI Engineer

  • WRS Health
  • Full time
  • Remote
  • 11/13/2026
  • Worldwide

Full Stack Software Engineer | Robotics

  • Gecko Robotics
  • Full time
  • USA
  • 11/13/2026
  • Salary: Competitive
  • Pittsburgh, PA

Sr. Staff Software Development Engineer

  • Zscaler
  • Full time
  • Others
  • 11/13/2026
  • Bengaluru, India

Listings

by


Job Type

Language

Country

CodingJobBoard.com © 2026