Fluidstack

Senior Detection Engineer

New York, NY · Senior

Sponsorship not specified$10k-$100kDetected 1 day ago

PythonSQLComputer VisionCybersecuritySIEMSOC OperationsDetection Engineering

About the role

ABOUT FLUIDSTACK We exist to make humanity more free.
For most of human history, you farmed or you starved.
Technology gave people more time for the things they wanted to do, instead of things they had to do.

Extreme ownership. Full autonomy. Own things end to end often taking on scope outside your core role without being asked to get things done.
Velocity. We drive everything forward as fast as possible.
Build detection-as-code pipelines so every rule is version-controlled, tested, and peer-reviewed before it ships, and false-positive rates are measured, not guessed.
Lead triage and response for the alerts you build, and close out incidents with root-cause writeups that change the detection stack, not just the ticket queue.
Build automation that removes manual triage steps, so the team's alert load scales slower than the company does.

5+ years in detection engineering or threat hunting inside a mature security operations org (cloud-native infrastructure, SaaS, or fintech).
Deep hands-on experience with SIEM and EDR tooling: Splunk, Elastic, CrowdStrike, or equivalent, including query languages and pipeline tuning, not just console use.
You've written and maintained detection logic mapped to MITRE ATT&CK against real adversary behavior, and you can point to detections that caught something.
You know the difference between a noisy rule and a broken one, and you tune or kill detections before responders learn to ignore them.

experience securing physical infrastructure or OT/data center environments, purple team experience, or contributions to open-source detection content (Sigma, detection rule repos).
Fluidstack is an Equal Employment Opportunity Employer.
Fluidstack will consider for employment qualified applicants with arrest and conviction records pursuant to applicable law.
You will receive a confirmation email once your application has successfully been accepted.

Build detection and response coverage across corporate, cloud, and data center environments that are growing faster than any off-the-shelf playbook assumes.
Secure the systems and networks that frontier AI labs depend on, where downtime and compromise both carry real cost.
Stand up security tooling, identity, and endpoint management for a company that adds people, sites, and vendors every month.
Turn incident learnings and threat intel into durable detection logic instead of one-off fixes.

This listing is sourced directly from Fluidstack's careers page and normalized into a canonical job model.