Senior Security Engineer, Threat Detection and Response jobs in United States
cer-icon
Apply on Employer Site
company-logo

True Anomaly · 18 hours ago

Senior Security Engineer, Threat Detection and Response

True Anomaly is focused on building innovative technology for space security and sustainability. As a Senior Threat Detection & Response Engineer, you will shape the future of the threat detection and response function, designing and implementing detection capabilities and improving incident response procedures.

AerospaceArtificial Intelligence (AI)ManufacturingMilitaryNational Security
badNo H1BnoteSecurity Clearance RequirednoteU.S. Citizen Onlynote

Responsibilities

Develop incident response plans, playbooks, and SOPs; build scalable processes to support future team growth
Design and implement custom security detections across corporate and cloud environments, leveraging frameworks like MITRE ATT&CK
Continuously tune detection rules and develop threat models to improve fidelity and address coverage gaps
Monitor, triage, and respond to security alerts across multiple platforms and data sources
Lead incident investigations through technical analysis, containment, eradication, and recovery; document findings and lessons learned
Proactively hunt for threats and leverage threat intelligence to anticipate emerging adversary TTPs
Administer and optimize CrowdStrike Falcon and SIEM platforms; integrate log sources to enhance visibility and correlation
Build automation and orchestration workflows to improve response efficiency
Partner with cross-functional teams (IT, Engineering, Legal, Compliance) and communicate technical findings to diverse stakeholders

Qualification

CrowdStrike FalconSIEM platformsThreat detection engineeringScripting languagesIncident responseCloud security monitoringDigital forensicsMalware analysisRed team exercisesPurple team exercisesCommunication

Required

6+ years of hands-on experience in security operations, detection engineering, incident response, or threat hunting
Proven experience building and deploying custom security detections in enterprise environments
Strong experience with CrowdStrike Falcon platform, including detection tuning, alert triage, and response actions
Strong experience across Windows, MacOS, and Linux endpoint security, including understanding of OS internals, attack techniques, and defensive measures
Proficiency with SIEM platforms and log analysis (e.g., Splunk, Elastic, Falcon NG-SIEM, or similar)
Strong understanding of common attack vectors, TTPs, and security frameworks (MITRE ATT&CK, NIST, Cyber Kill Chain)
Functional proficiency in at least one scripting language (Python, PowerShell, Bash) for automation and analysis
Excellent verbal and written communication skills
This position requires a minimum Secret clearance

Preferred

Active TS/SCI security clearance or ability to obtain and maintain a security clearance
Experience building or significantly maturing a detection and response program
Experience working in Azure Government Cloud (Azure GovCloud) environments
Experience with cloud security monitoring in AWS, GCP, or Azure commercial environments
Familiarity with CMMC, FedRAMP, NIST 800-53, or other federal compliance frameworks
Knowledge of digital forensics and malware analysis techniques
Experience with Detections-as-Code paradigms, GitOps, CI/CD, etc
Experience participating in or supporting red team/purple team exercises

Benefits

Equity
Health
Dental
Vision
HRA/HSA options
PTO and paid holidays
401K
Parental Leave

Company

True Anomaly

twittertwittertwitter
company-logo
True Anomaly is builds space security and resilience at the intersection of spacecraft, software, and autonomy.

Funding

Current Stage
Growth Stage
Total Funding
$418.02M
Key Investors
AccelStifel BankRiot Ventures
2025-04-30Series C· $260M
2025-04-30Debt Financing
2023-12-12Series B· $100M

Leadership Team

leader-logo
Mark Seidel
Chief Financial Officer
linkedin
leader-logo
Frank Di Pentino
Chief Strategy Officer
Company data provided by crunchbase