True Anomaly
Threat Detection & Response Engineer III
$120K–$165K
Long Beach, CA · Full-time · Posted Oct 29, 2026
- Experience
- 3+ years in cybersecurity, including at least 2 years focused on security operations, detection engineering, incident response, or threat hunting.
- Visa sponsorship
- Must be a U.S. citizen, lawful permanent resident, protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain required U.S. Department of State authorizations under ITAR; active Secret/TS security clearance required.
About the job
Build and mature security detections, incident response processes, and tooling across corporate and cloud environments.
What you'll do
- Develop incident response plans, playbooks, and scalable procedures; investigate, contain, and document security incidents.
- Design, tune, and maintain detections; monitor alerts, hunt threats, and use threat intelligence to address coverage gaps.
- Administer EDR and SIEM platforms and build automation and orchestration workflows for response.
What they ask for
- Active Secret or TS security clearance and ability to maintain it.
- Experience building or tuning security detections; familiarity with risk-based alerting, EDR, SIEM, and log analysis.
- Working knowledge of endpoint security and common attack techniques, plus security frameworks such as MITRE ATT&CK.
- Scripting experience with Python, PowerShell, or Bash; strong verbal and written communication.
Nice to have
- Knowledge of digital forensics and malware analysis; experience maturing detection and response programs.
- Experience with Azure GovCloud or commercial cloud monitoring, federal compliance frameworks, Detections-as-Code, GitOps, CI/CD, or red/purple-team exercises.
Pay
USD $120,000 - $165,000 (base salary)
Tools
MITRE ATT&CK, Windows, MacOS, Linux, Splunk, Elastic, Python, PowerShell
Model-written summary · the original posting is authoritative