Threat Detection Engineer (Python/Automation)

Threat Detection Engineer

Location: New York City, (Hybrid) 

Compensation: Top-tier compensation

We’re representing a global investment and technology development firm that sits at the intersection of high-finance and deep-tech. They’re known for an exceptionally high hiring bar, rigorous engineering standards, and an environment that functions more like a research lab than a traditional bank.

They are looking for a Security Engineer who thinks like a Software Engineer.

If you are tired of staring at dashboards, manually closing tickets, or wrestling with legacy SIEMs, this is your exit. This team does not want operators, they want builders. You will join a group that treats detection as a code problem and incident response as a systems engineering challenge.

Your goal is to build the brain of the security operation, not just be the hands. You will work to minimize manual triage through aggressive automation and high-fidelity detection engineering.

Your responsibilities:

• Treat Detection as Code: You won’t just configure alerts in a UI. You will write, test, and deploy detection logic (Python/YAML) via CI/CD pipelines.

• Build, Don’t Just Buy: You will improve the firm's threat detection capabilities by building custom tooling and integrating APIs to find signals that commercial vendors miss.

• Deep-Dive Forensics: When a true positive hits, you will go deep, analyzing disk images, memory dumps, and kernel-level process activity to understand the how and why.

• Eliminate Toil: You will relentlessly automate repetitive triage tasks. 

Who you are:

We’re not looking for a standard SOC Analyst. We’re looking for a Computer Scientist who fell in love with security.

• You have a degree in Computer Science (or comparable depth) and understand how software is built, how memory is managed, and how the Linux kernel operates.

• You’re proficient in Python or Go. You don’t just script; you apply software engineering best practices (version control, testing, modularity) to your security work.

• You have 2–5 years of experience in a high-rigor environment (Top-tier Tech, HFT, or complex Enterprise). You have seen security at scale and know why "default" tools fail.

• You care more about finding the needle in the haystack than checking a compliance box. You enjoy the hunt.

Why Apply?

• No red tape. If you need to write a tool to solve a problem, you write it.

• High Signal, Low Noise. Join a team that values intellectual honesty and technical precision over security theater.

• Elite Peers. Work alongside some of the smartest engineers in the world (Olympiad winners, PhDs, and open-source contributors).

Please send your resume. We are prioritizing candidates who can demonstrate their ability to code their way through a security incident.