Build agentic security operations for Workleap and ShareGate, combining detection engineering, incident response, and cloud security expertise across a small team.
As a hands-on Staff individual contributor, you will own how threats are detected, investigated, and answered across Workleap and ShareGate. You will build systems that triage, enrich, correlate, and route findings while defining when agents act independently or require human judgment. Your work spans Azure, cloud-native SIEM and XDR tooling, Jira, and MITRE ATT&CK-mapped; detections.
Key Responsibilities: Build end-to-end security operations integrations and agentic investigation workflows
Define agent trust models with evaluations and safeguards
Reduce false positives and correctly prioritize security findings
Own detection engineering as code mapped to MITRE ATT&CK;
Lead incident response from triage through postmortems
Requirements: Seven-plus years in security operations, incident response, or detection engineering
Recent hands-on experience in a cloud SaaS setting
Experience building agent systems with evaluations for trusted outputs
Fluency in a SIEM query language and measured false-positive rates
Strong understanding of identity and cloud attack paths
Shape trusted agentic detection, response, and investigation systems across Workleap and ShareGate with measurable security outcomes.