Detection Engineer - Product Security

Join Product Security to build and improve how we detect and respond to threats across our client's web and mobile applications, APIs, and supporting services. You will develop SIEM detections, improve the telemetry behind them, strengthen AI-agent-assisted alert triage, and build carefully controlled response automation.

What you'll do:

• Build, test, and tune security detections and anomaly-detection jobs in a SIEM. Use version control, backtesting, and staged releases to keep detections reliable
• Develop coverage for threats such as account takeover, automated abuse, unusual traffic, enumeration, access-control failures, authentication and session misuse, and suspicious access to sensitive data
• Identify the application events and fields needed for effective detection. Work with application and platform teams to improve event coverage, quality, and attribution. Design, build, and improve the AI triage agent itself
• Develop its workflows, tool integrations, context enrichment, and escalation behavior; measure decision quality, reduce noise, and ensure uncertain or high-impact cases reach a human responder. Build incident workflows and response playbooks that enrich alerts, route them to the right responders, and provide clear investigation guidance
• Introduce response automation in stages. Test actions, limit their scope, and provide appropriate human approvals, audit records, monitoring, and rollback
• Evaluate detection and response performance, investigate failures, and use responder feedback to improve the system.

Job Requirements

• Experience building or operating production software or security systems
• Practical experience with SIEM queries, security analytics, detection development, or alert tuning Knowledge of web, mobile, or API security threats and how to detect them in application and security data
• Ability to write maintainable code and automation in a language such as Python, Go, or Java
• Hands-on experience building, integrating, or extending AI agents or LLM-powered applications, including tool integrations, orchestration, evaluation, and safety controls Understanding of logging, event schemas, data quality, and how telemetry gaps affect security detection
• Experience testing and deploying automation safely, including access control, auditability, failure handling, and rollback
• Clear communication and the ability to work with security, application, and platform teams.

Helpful experience:

• Behavioral analytics, anomaly detection, or machine-learning system
• Agent frameworks, tool-calling workflows, retrieval and context enrichment, and LLM evaluation Security orchestration, incident response, or containment playbooks
• Web and mobile application security testing or inv estigation.
• Infrastructure as code and CI/CD practices.

The preceding job description had been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties and responsibilities required of employees assigned to this job.

What We Offer You will find here not only a challenging and interesting workplace, but also a rewarding work experience, with competitive compensation and benefit packages:

• A dynamic and multinational environment with dedicated professionals who are ready to share their knowledge with you;
• Soft skills and technical training for current and emerging products and technologies;
• Career development: opportunity to grow within the team;
• Special referral bonuses for recommending your friends;
• Private Medical subscription;
• Meal tickets;
• Extra vacation days;
• Flexible working hours and work from home, aligned with project needs;
• Friendly team who is eager to meet you.

What's next: It's best to apply today, because job postings can be taken down and we wouldn't want you to miss this opportunity. In case you need further information, just send us a message at [email protected] and we"ll be happy to assist!

Diversity & Inclusion Here at the Stefanini Group, we value plurality and equity, regardless of race, sexual orientation, disability, age, ancestry, religion, gender, and nationality. We understand and encourage the importance of being you!

About Us We are the Stefanini group, a global tech consulting company of Brazilian origin that believes in the power of people to transform businesses through technology.

We are present in over 40 countries and operate with the purpose of co-creating solutions TOGETHER WITH OUR CLIENTS that accelerate results and improve the experience of people and organizations.

Here, we like to say that technology is not the end, but the means: what really matters are the people who drive it all.

Our mindset is AI First, meaning we invest in cutting-edge technology in everything we do, focusing on results for our clients.

We are a company, A GROUP, that breathes collaboration and offers a dynamic environment where you will learn by doing, grow alongside the team, and have space to contribute with ideas and projects.

More than just talking about digital transformation, we believe in real transformation that starts with people and impacts real businesses.

If you are looking for a place to develop, innovate, and be part of something bigger, the Stefanini Group is your place.

We want to inform you that there are currently scams targeting job seekers by falsely using our company"s name, Stefanini. We sincerely apologize for any confusion or inconvenience this may have caused.

Please remember that legitimate job offers from Stefanini will always come through official channels, including direct communication with our trained recruiters. If you receive any unsolicited messages requesting payment or personal information, please disregard them.

If you suspect you"ve been targeted, please contact us immediately at [email protected] for verification.

Key Points to Remember:

• Legitimate job offers only follow interviews conducted with our hiring managers or clients.
• We will never ask for payment at any stage of the recruitment process.

Stay vigilant and feel free to reach out for verification. Your safety and security are our top priorities. Thank you for your understanding and cooperation.