Detection Engineering Lead

Senior-to-principal detection engineer in Dropzone AI's R&D team, acting as one of the company's leading experts on adversary tradecraft, detection efficacy and SIEM content. The job is building software, not delivering detection services to customers. Remote in the US.

The lead prototypes and improves an AI agent that writes and refines detection content across varied security environments, designs rubrics for scoring AI-generated rules for SIEM, EDR, NDR, cloud, identity and SaaS platforms, experiments with agent loops linking detection to threat intelligence and hunting, sets detection quality and testing practice, and researches new detection opportunities. Dropzone wants five or more years of detection engineering, deep expertise in two or more major SIEMs, broad telemetry knowledge, and strong MITRE ATT&CK and coverage analysis skills.