Senior Security Engineer

Daylight is a security services company providing managed agentic security services. The Senior Security Engineer will design and implement detection logic, investigate alerts, and automate response mechanisms, working with platform and AI teams to build autonomous threat detection and response.

Responsibilities:

• Lead Investigations: Triage, analyze, and respond to alerts across cloud, endpoint, and network environments with automation-first principles
• Build Detections: Write detection logic and behavioral rules as code that is clear, testable, and scalable
• Automate Response Workflows: Develop Go-based automation for enrichment, containment, and remediation playbooks
• Define Detection-as-Code Practices: Implement a detection and response framework with strong engineering fundamentals (testing, CI/CD, version

• control)

• Collaborate Across Functions: Partner with platform and AI teams to integrate detection logic into the broader Daylight stack
• Support DFIR: Participate in incident investigations and post-incident reviews; DFIR skills (memory, disk, or cloud forensics) are a strong plus

Requirements:

• 3+ years in detection engineering, incident response, or blue team roles
• Experience building or integrating automated response systems is key
• Familiarity with detecting and responding to threats in cloud environments (AWS, GCP, or Azure)
• Practical experience in digital forensics and incident response — logs, memory, containers, cloud
• Comfort with attacker tactics and techniques (MITRE ATT&CK, behavioral detection, threat modeling)