← Security
Security
Threat Detection Engineer
Open — accepting applications
Remote
Remote-friendly
Full time
Access tier: T3
Background screening required
Professional credentials required
About Sequester
Sequester is a privacy-first encrypted vault for personal photos and videos. We build software where security, reliability, and user trust are product features???not afterthoughts.
About this role
You will build the detections that wake people up at 3 a.m.???only when it matters???by turning telemetry into high-fidelity alerts across Sequester's stack.
What you will do
- Author and maintain detection rules for cloud, application, and identity log sources
- Measure detection efficacy (precision/recall) and iterate with SOC feedback
- Integrate threat intelligence feeds relevant to credential stuffing and cloud abuse
- Automate enrichment (geo, ASN, user context) to speed analyst triage
- Document detection coverage maps aligned to MITRE ATT&CK or internal threat models
What we are looking for
- Detection engineering or threat hunting experience with SIEM/SOAR platforms
- Proficiency in query languages (KQL, SPL, SQL) and at least one scripting language
- Understanding of SaaS attack paths: OAuth abuse, API keys, bucket misconfigurations
- Collaborative mindset with SOC analysts who consume your rules daily
Location
Remote-friendly. We hire globally and collaborate async-first across time zones.
Mag-apply gamit ang Sequester account mo
Ginagamit namin ang parehong secure account ng Sequester app. Mag-sign in o gumawa ng account para mag-apply — babalik ka rito kapag tapos ka na.