Threat detection and incident response engineering define this onsite role at True Anomaly, requiring an active security clearance and security operations expertise.
As a Threat Detection & Response Engineer III, you will build detection capabilities, response processes, and security tooling. You will design custom detections, investigate incidents, and strengthen a growing security operations program. The position is onsite in Denver or Long Beach, with on-call participation required.
Key Responsibilities: Develop incident response plans, playbooks, and scalable standard operating procedures
Design and tune detections across corporate and cloud environments
Monitor, triage, investigate, contain, and recover from incidents
Administer EDR and SIEM platforms and integrate log sources
Build automation workflows and communicate findings across teams
Requirements: Active Secret or Top Secret security clearance
Three-plus cybersecurity years, including two focused years
Experience building or tuning security detections
Familiarity with EDR, SIEM, endpoint security, and attack techniques
Python, PowerShell, or Bash scripting experience
Use detection engineering, incident response, threat hunting, and security automation skills supporting True Anomaly’s security program.