Senior Security Engineer

Daylight is a security services company delivering Managed Agentic Security Services, including managed detection and response, threat hunting, and security data lake capabilities. Daylight is seeking a Senior Security Engineer to design detection logic, investigate alerts, automate response mechanisms, and collaborate with platform and AI teams to build autonomous threat detection and response at scale.

Responsibilities:

• Lead Investigations: Triage, analyze, and respond to alerts across cloud, endpoint, and network environments with automation-first principles
• Build Detections: Write detection logic and behavioral rules as code that is clear, testable, and scalable
• Automate Response Workflows: Develop Go-based automation for enrichment, containment, and remediation playbooks
• Define Detection-as-Code Practices: Implement a detection and response framework with strong engineering fundamentals (testing, CI/CD, version control)
• Collaborate Across Functions: Partner with platform and AI teams to integrate detection logic into the broader Daylight stack
• Support DFIR: Participate in incident investigations and post-incident reviews; DFIR skills (memory, disk, or cloud forensics) are a strong plus

Requirements:

• 3+ years in detection engineering, incident response, or blue team roles
• You automate what others manually repeat. Experience building or integrating automated response systems is key
• Familiarity with detecting and responding to threats in cloud environments (AWS, GCP, or Azure)
• Practical experience in digital forensics and incident response — logs, memory, containers, cloud
• Comfort with attacker tactics and techniques (MITRE ATT&CK, behavioral detection, threat modeling)