Freelance: Security Engineer

Responsibilities

• Build, test, tune, and maintain security detections and anomaly detection use cases within a SIEM platform.
• Develop detection coverage for threats including:
  • Account takeover
  • Automated abuse
  • Enumeration attacks
  • Authentication and session misuse
  • Access control failures
  • Suspicious access to sensitive data
• Improve telemetry quality, event coverage, attribution, and logging capabilities.
• Design and enhance AI assisted alert triage capabilities.
• Improve agent workflows, tool integrations, context enrichment, and escalation procedures.
• Build incident response workflows and security playbooks.
• Implement response automation with appropriate controls, approvals, monitoring, auditability, and rollback capabilities.
• Evaluate detection effectiveness and continuously improve based on feedback and incident learnings.
• Collaborate closely with product, platform, and security teams.

Required Skills

• Experience building or operating production software or security systems.
• Strong hands on experience with SIEM platforms, detection engineering, security analytics, and alert tuning.
• Knowledge of web, mobile, and API security threats.
• Programming skills in Python, Go, or Java.
• Experience developing or integrating AI agents and LLM powered applications.
• Understanding of logging, telemetry, event schemas, and data quality.
• Experience implementing secure automation and response workflows.
• Strong stakeholder communication skills.

Nice to Have

• Behavioral analytics and anomaly detection.
• Machine learning based security monitoring.
• Agent frameworks and LLM evaluation.
• Security orchestration and incident response automation.
• Application security testing and investigations.
• Infrastructure as Code and CI/CD environments.

Practical info

• Start: ASAP
• 40 hours/week
• 12 month contract (Freelance only)