Security Engineer, Detection & Response - Global Security Organization - Threat Management Incident Response and Investigation

What you'll do

• Own detection rules, behavioral models, and pipelines from log ingestion through alerting.
• Build streaming anomaly detection pipelines using statistical methods and unsupervised learning; hunt historical logs for threats and detection gaps.
• Develop detection for AI agent attacks and interactions, and optimize alert quality and logging standards.

What they ask for

• 5+ years of hands-on experience in information security, cybersecurity engineering, or a related technical field.
• Experience processing and correlating large-scale, multi-source security telemetry.
• Foundation in data analysis, statistics, and applied machine learning for anomaly detection; hands-on experience building SIEM/EDR detection rules or threat-hunting queries.
• Knowledge of AI agent security risks and hardening strategies, including prompt injection, unauthorized tool execution, and denial of service.

Nice to have

• Familiarity with MITRE ATLAS and applying it to AI system threat modeling and risk assessment.
• LLM/agent detection experience, agent loop architecture knowledge, or global enterprise-scale detection operations experience.

Tools

MITRE ATLAS, OWASP Top 10 for LLMs, SIEM, EDR

AI focus

Detect AI agent abuse and other AI-specific risks, including unauthorized tool calls, agent escape, multi-agent collusion, instruction manipulation, and data exfiltration; monitor agent–LLM–tool–data interactions.