Senior Detection Engineer (remote eligible)

Overview

REI Co-op is looking for a Senior Detection Engineer. You will help protect our people, members, and systems. You will join our Security Operations team. You will build ways to find and stop cyber threats. Your work will cover devices, user access, networks, cloud tools, software services, and new AI tools.

You will write and tune alerts. You will hunt for threats and help review security events. You will use scripting and automation to make incident response faster, more efficient, and more consistent. You will work with security analysts, engineers, data teams, and business partners. Together, you will close gaps, improve data, and help teams make good choices during an event.

Responsibilities and Qualifications

• Build, test, and maintain threat alerts. Use SIEM, EDR, cloud, network, SaaS, and app tools. Work with Microsoft Sentinel, Splunk, or like tools.

• Use MITRE ATT&CK, threat data, and event trends. Find gaps, cut false alerts, and improve alert quality.

• Join threat hunts and event reviews. Help contain threats, find root causes, and restore service. Turn lessons into new alerts and guides.

• Build scripts, work flows, reports, and SOAR links. Make alert review and event response fast, clear, and easy to repeat.

• Build ways to watch AI apps, copilots, agents, and AI data use. Help find data loss, stolen access, unsafe prompts, and misuse.

• Work with security, engineering, data, and business teams. Share clear updates. Take part in the on-call schedule as needed.

Qualifications

• A bachelor’s degree in computer science, information security, information technology, or a related field. An equal mix of school and work experience also meets this need.

• 5 or more years of work in security operations, detection engineering, threat hunting, incident response, or security engineering.

• Skill creating and tuning alerts in a SIEM, such as Splunk or Microsoft Sentinel. Work with EDR tools, such as Microsoft Defender, CrowdStrike, or SentinelOne.

• Skill reviewing threats across devices, user access, networks, cloud tools, or SaaS services. This includes log review and root cause work.

• Working knowledge of MITRE ATT&CK and attacker tactics, techniques, and procedures.

• Skill with at least one script language, such as Python or PowerShell. Ability to work well with both tech and business teams.

• Willing to travel to Seattle area HQ once or twice a year for business travel as needed (remote eligible role)

Closing

At REI, we believe the outdoors is for all . We are committed to becoming a fully inclusive, anti-racist, multicultural organization (https://www.rei.com/newsroom/article/rei-antiracist-multicultural-fully-inclusive-commitment) . We know that there's strength in our diversity – that each employee brings unique skills, experiences, and perspectives. Every day you are driving change, fostering a culture of respect, and knowing you're backed by benefits that support your whole life. To work towards this commitment and fulfill our brand promise of inspiring and enabling a life outside for everyone, we seek employees who demonstrate different ways of working, create a sense of belonging, and actively listen and learn.

Pay Transparency

We are committed to practices that promote pay equity and transparency. As required by applicable Pay Transparency laws, REI provides a range of compensation for roles that may be hired in locations under these requirements. Factors that may be used to determine your actual salary may include a wide array of factors, including: your specific skills and experience, geographic location or other relevant factors.

REI offers all regular employees a generous employee discount, access to health benefits, a retirement savings plan and accrued time off. Click here (https://foryourbenefit-rei.com/) for a detailed overview of benefits plans by employee profile.

Pay Range

$130,200.00 - $208,200.00 per year