Security Detection Engineer

WHOOP - Boston, MA

Hiring: Security Detection Engineer Company: WHOOP Location: Boston, MA Job Posted Time: 2026-09-10 11:48:43 Target Skills & Keywords : Machine Learning, PowerShell, Python, Root Cause Analysis, SaaS About the job Experience: •4+ years of hands-on experience in Information Security, with a focus on detection engineering, threat detection, or security operations. Required Skills: •Design, build, and scale high-signal detections across cloud, identity, endpoint, network, and application layers using Detection-as-Code principles. •Develop and maintain detection logic aligned to real-world attacker behavior and frameworks such as MITRE ATT&CK across modern security platforms. •Translate threat intelligence into actionable detections and validate effectiveness through adversary emulation and testing. •Build behavioral detections to protect against threats such as account takeover, credential abuse, API misuse, automation attacks, privilege escalation, and data exfiltration. •Continuously improve detection quality by tuning alerts, reducing false positives, and implementing automated enrichment and triage. •Define and track detection KPIs (e.g., precision, recall, false positive rate, MTTD) and implement processes to measure and improve detection health. •Support and lead incident investigations, including containment, root cause analysis, and post-incident detection improvements. •Contribute to the on-call rotation while proactively reducing operational overhead through automation. Qualifications: •Demonstrated experience writing and tuning detections across cloud, identity, endpoint, or application environments. •Operational familiarity with detection frameworks and tooling such as YARA, SIGMA, Suricata, or similar rule-based detection methodologies. •In-depth knowledge of attacker techniques across identity compromise, cloud abuse, lateral movement, and data exfiltration. •Expertise analyzing and building detections on cloud and SaaS telemetry, including authentication events, API activity, and system logs. •Strong scripting skills in a scripting language such as Python, Go, or PowerShell for automation and tool development. •Demonstrated capacity to operate effectively in a fast-paced, high-growth environment. •Strong analytical mindset with a systems-thinking approach to reducing noise and increasing signal fidelity. •Effective communicator who can collaborate with engineers and explain detection strategy clearly to both technical and non-technical stakeholders. •Operational familiarity with applying data analysis or machine learning techniques to security detection or alert triage is a plus. •Bachelor’s degree in Computer Science, Information Security, or a related technical field, and/or relevant security certifications are a plus. Interested candidates, please apply directly through the job posting on company's career page or try via AI auto apply on this platform. Don't miss this opportunity to join a forward-thinking team!