Threat detection and incident response engineering define this onsite role at True Anomaly, requiring an active security clearance and security operations expertise.
As a Threat Detection & Response Engineer III, you will build detection capabilities, response processes, and security tooling. You will design custom detections, investigate incidents, and strengthen a growing security operations program. The position is onsite in Denver or Long Beach, with on-call participation required.
Key Responsibilities:
- Develop incident response plans, playbooks, and scalable standard operating procedures
- Design and tune detections across corporate and cloud environments
- Monitor, triage, investigate, contain, and recover from incidents
- Administer EDR and SIEM platforms and integrate log sources
- Build automation workflows and communicate findings across teams
Requirements:
- Active Secret or Top Secret security clearance
- Three-plus cybersecurity years, including two focused years
- Experience building or tuning security detections
- Familiarity with EDR, SIEM, endpoint security, and attack techniques
- Python, PowerShell, or Bash scripting experience
Use detection engineering, incident response, threat hunting, and security automation skills supporting True Anomaly’s security program.