Whoop
Security Detection Engineer
$130K–$170K
Boston, MA · On-site · Full-time · Posted Oct 22, 2026
- Experience
- 4+ years in Information Security, focused on detection engineering, threat detection, or security operations.
- Education
- A bachelor’s degree in Computer Science, Information Security, or a related technical field, and/or relevant security certifications are a plus.
- Visa sponsorship
- Participates in E-Verify to determine employment eligibility.
About the job
Designs and improves security detections across WHOOP’s cloud, identity, endpoint, network, and application environments to protect member data and support incident response.
What you'll do
- Build and tune detections using Detection-as-Code, threat intelligence, and attacker-behavior frameworks; validate them through testing.
- Improve detection quality with automation, enrichment, triage, and measurement of detection KPIs; support investigations and on-call response.
- Partner with engineering and other teams to close monitoring gaps and strengthen detection coverage as the environment scales.
What they ask for
- Hands-on experience writing and tuning detections across cloud, identity, endpoint, or application environments.
- Strong understanding of attacker techniques, including identity compromise, cloud abuse, lateral movement, and data exfiltration.
- Expertise analyzing cloud and SaaS telemetry, including authentication events, API activity, and system logs.
- Scripting skills in a language such as Python, Go, or PowerShell.
Nice to have
- Experience building detective controls for consumer-facing platforms or detecting authentication and API abuse at scale.
- Familiarity with data analysis or machine learning for security detection or alert triage; a relevant degree and/or security certifications are also a plus.
Pay
$130,000 - $170,000 USD base salary
Tools
YARA, SIGMA, Suricata, Python, Go, PowerShell, MITRE ATT&CK
AI focus
Explore and apply advanced analytics and machine learning to improve detection fidelity, reduce noise, and enhance triage and investigation workflows.
Model-written summary · the original posting is authoritative