Detection Engineer

Remotefull-timemid

OtherDetection Engineer

0 views0 saves0 applied

Apply Now

Quick Summary

Key Responsibilities

version-controlled rules, peer review, automated validation and testing, and CI/CD deployment across customer environments.

Technical Tools

OtherDetection Engineer

About the Role

~1 min read

We're looking for a Detection Engineer to own the detection content that powers the Artemis platform. You'll design, build, test, and continuously tune high-fidelity detections across cloud, identity, endpoint, and SaaS environments — treating detection as code, and using AI as a force multiplier at every step: authoring rules with AI assistance, and building anomaly detections that learn what's normal in each environment and flag what isn't. Detections at Artemis don't just fire alerts; they feed an AI-native investigation pipeline, so precision, rich context, and machine-readable output matter as much as coverage. This is a hands-on engineering role where every rule you ship directly determines what threats we catch for customers and how fast we catch them.

Responsibilities

~1 min read

Requirements

~1 min read

Proven track record designing, building, and tuning detections at scale across SIEM, EDR, or custom detection platforms

Strong proficiency in detection languages and formats such as Sigma, KQL, SPL, or YARA-L, and comfort writing code (Python preferred) for automation and testing

Deep knowledge of attacker tactics, techniques, and procedures (MITRE ATT&CK) and how they manifest in logs across cloud, identity, endpoint, and SaaS telemetry

Experience with detection-as-code workflows: Git, peer review, automated testing, and CI/CD for detection content

Experience using AI tools to accelerate detection authoring, tuning, or validation — and judgment about when AI-generated logic is ready to ship

Experience building behavioral or anomaly-based detections: establishing baselines of normal activity and engineering detections that flag meaningful deviations

Strong log-analysis skills and demonstrated ability to distinguish malicious activity from benign noise across diverse data sources

Clear written and verbal communication — able to document detection logic and explain coverage and trade-offs to engineers, analysts, and customers

Nice to Have

~1 min read

Experience in an MDR, MSSP, or high-volume SOC environment
Experience with attack simulation and validation frameworks (Atomic Red Team, purple teaming)
Background in threat hunting or incident response across cloud environments
Experience with UEBA platforms or statistical/ML-based detection methods (peer grouping, time-series baselining, outlier scoring)
Experience building AI-assisted detection or investigation tooling from scratch
Contributions to open-source detection content or the broader detection engineering community

What We Offer

~1 min read

We offer a competitive compensation of $100,000-160,000 per year, and a top-of-market equity component. A variety of factors are considered when determining the compensation, including a candidate's professional experience. Final offer amounts may vary from the amounts listed.

At Artemis, we believe the best ideas come from diverse teams. We're committed to creating an inclusive environment where people of all backgrounds, experiences, and perspectives can do their best work. We welcome everyone, regardless of race, gender, age, religion, identity, or anything else that makes you, you.