Detection Engineer - Product Security (For independent contractors)

Join Product Security to build and improve how we detect and respond to threats across our web and mobile applications, APIs, and supporting services. You will develop SIEM detections, improve the telemetry behind them, strengthen AI-agent-assisted alert triage, and build carefully controlled response automation.

Responsibilities include: building, testing, and tuning security detections and anomaly-detection jobs in a SIEM; developing coverage for threats such as account takeover, automated abuse, unusual traffic, enumeration, access-control failures, authentication and session misuse, and suspicious access to sensitive data; identifying the application events and fields needed for effective detection; designing, building, and improving the AI triage agent itself; building incident workflows and response playbooks; introducing response automation in stages; and evaluating detection and response performance.

The ideal candidate brings: experience building or operating production software or security systems; practical experience with SIEM queries, security analytics, detection development, or alert tuning; knowledge of web, mobile, or API security threats; ability to write maintainable code in Python, Go, or Java; hands-on experience with AI agents or LLM-powered applications; understanding of logging and event schemas; experience testing and deploying automation safely; and clear communication skills.

Helpful experience includes: behavioral analytics, anomaly detection, or machine-learning systems; agent frameworks; security orchestration and incident response; web and mobile application security testing; and infrastructure as code and CI/CD practices.