Security Detection Engineer (Cybersecurity)

TL;DR

Security Detection Engineer (Cybersecurity): Designing and scaling high-fidelity detection capabilities to protect biometric and health data with an accent on Detection-as-Code and MITRE ATT&CK alignment. Focus on building behavioral detections for API misuse, account takeover, and cloud abuse.

Location: Hybrid (Boston, MA)

Salary: $130,000 - $170,000

Company

WHOOP empowers members to perform at a higher level through a deeper understanding of their bodies and daily lives.

What you will do

• Design and scale high-signal detections using Detection-as-Code across cloud, identity, endpoint, and application layers.
• Develop detection logic aligned with MITRE ATT&CK and translate threat intelligence into actionable alerts.
• Build behavioral detections to protect against account takeover, API misuse, automation attacks, and data exfiltration.
• Continuously improve detection quality by tuning alerts, reducing false positives, and implementing automated triage.
• Lead incident investigations, including containment, root cause analysis, and post-incident improvements.
• Collaborate with Engineering, IT, Infrastructure, and Product teams to ensure systems launch with strong monitoring.

Requirements

• 4+ years of experience in Information Security, focusing on detection engineering, threat detection, or security operations.
• Demonstrated experience writing and tuning detections across cloud, identity, endpoint, or application environments.
• Proficiency in scripting languages such as Python, Go, or PowerShell for automation.
• Strong understanding of attacker techniques, including identity compromise, cloud abuse, and lateral movement.
• Experience with rule-based detection methodologies such as YARA, SIGMA, or Suricata.
• Must be authorized to work in the US (E-verify participation).

Nice to have

• Experience building detective controls for consumer-facing platforms or detecting API abuse at scale.
• Familiarity with applying data analysis or machine learning techniques to security detection.
• Bachelor’s degree in Computer Science, Information Security, or relevant security certifications.

Culture & Benefits

• Competitive base salary and meaningful equity packages.
• Comprehensive health and welfare benefits.
• Opportunity to shape a growing detection program within a high-growth environment.
• Inclusive culture that values character and diversity.