Security Engineer - Detection & Monitoring

We are building an Agile Security Operations team where you'll own the design and implementation of our threat detection and monitoring capabilities. This role offers an exciting opportunity for a security engineer who wants to take ownership of building comprehensive detection capabilities from the ground up, bridging the gap between security theory and operational reality.

What You'll Own

Detection Engineering & Strategy

1. Design and implement custom detection rules for our AWS/ECS hybrid environment
2. Build business cases for monitoring investments, translating technical requirements into business value
3. Develop threat hunting capabilities and behavioral analysis frameworks
4. Create and maintain detection logic for our SIEM platform (Sumo Logic/Elastic integration)

Monitoring Architecture

1. Own the end-to-end monitoring strategy across cloud infrastructure, containers, and on-premise POS devices
2. Design real-time alerting systems that minimize noise while maximizing threat visibility
3. Build custom dashboards and operational intelligence for security and business stakeholders
4. Integrate monitoring across our corporate infrastructure, AWS cloud, and Qu Point of Sale systems

Innovation & Automation

1. Automate repetitive detection tasks using scripting and no-code/low-code platforms
2. Develop automated response playbooks and SOAR integration
3. Create innovative solutions for monitoring container workloads and serverless functions
4. Build detection capabilities for emerging threats and attack vectors

Business Impact & Metrics

1. Translate security events into business risk and operational metrics
2. Develop KPIs that demonstrate the value of security monitoring to executive leadership
3. Coordinate with engineering teams to embed security monitoring into development workflows
4. Ensure monitoring supports SOC 2, PCI, and ISO compliance requirements

What You Bring

Technical Foundation

1. 3+ years of experience in security engineering, monitoring, or detection with demonstrated bias for action
2. Strong knowledge of SIEM platforms, log analysis, and security event correlation
3. Experience with AWS security services (GuardDuty, CloudTrail, CloudWatch) and container environments
4. Proficiency in scripting (Python, PowerShell) or automation tools to solve problems efficiently

Ownership Mindset

1. Proven track record of taking ownership of complex technical challenges and driving them to completion
2. Experience building monitoring systems from scratch or significantly improving existing capabilities
3. Strong problem-solving skills with the ability to work independently and make decisions
4. Customer-focused approach to internal stakeholders and business requirements

Innovation & Growth

1. Experience with emerging technologies and willingness to experiment with new approaches
2. Understanding of threat intelligence, behavioral analysis, and advanced detection techniques
3. Familiarity with compliance frameworks and ability to translate requirements into technical controls
4. Strong communication skills to present technical concepts to business stakeholders