Senior Security Engineer (Detection & Response)

• As a Senior Detection Engineer, you’ll design, build, and maintain the detection logic that powers our platform, conduct proactive threat hunting, and drive continuous improvements across our detection and incident handling workflows
• You’ll collaborate closely with IT, Engineering, Platform, and other members of the Security team to identify attacker behaviors, build high‑fidelity detections, and strengthen our defenses
• You’ll also play a key role in designing and conducting table‑top exercises, improving processes, and building automation that reduces friction and accelerates response. You’ll help explore how AI can enhance detection, hunting, and operational efficiency
• Build, tune, and deploy high‑quality detections across our platform
• Develop and refine detections using telemetry from EDR, threat intel, endpoint & cloud posture platforms and native AWS cloud services
• Conduct proactive threat hunting to uncover threat actor behaviors and detection gaps
• Lead security event & incident handling, including triage, investigation, containment guidance, and post‑incident improvements
• Build automation and tooling to reduce manual effort and improve detection accuracy
• Drive process improvements across detection engineering, incident response, and telemetry workflows
• Collaborate with Engineering to ensure high‑quality logging and visibility across AWS environments
• Explore and prototype AI‑assisted detection and response capabilities
• Contribute to internal playbooks, documentation, and detection engineering best practices
• Design and conduct table‑top exercises to validate readiness and strengthen response processes
• Note: This position will require participation in an on-call rotation
• As a Sr. Detection Engineer, how results are achieved is paramount for your success and ultimately result in our success as an organization. In this role, your foundational knowledge, skills, abilities and personal attributes are anchored in the following:
• Good judgement - the exercise of critical thinking, analyzing and assessing problems and implications, identifying patterns, making connections of underlying issues, understanding risks and developing mitigation strategies, and taking ownership of the outcome
• Resourcefulness - taking a can-do approach, even in the face of obstacles and constraints by assessing what’s in front of you and effectively and efficiently optimizing what you have, whether it’s working on something new or thinking about how to do something better
• Teamwork and communication - putting our collective best together through documentation, collaboration, relationship-building, listening, empathy, recruiting, and evangelism
• Influence and leadership - fostering a community of knowledge-sharing, collaboration, mentorship, and forward-thinking
• Skills and knowledge - the capacity to actively learn and apply specific domain knowledge, know-how, and best practices to continually enhance and improve

Benefits

• Paid volunteer work
• Paid parental leave
• Work from home opportunities
• Medical, dental, and vision insurance, plus access to One Medical, Kindbody, and Teladoc
• Premium access to Headspace, ClassPass stipends, and webinars to support your overall wellness on topics like nutrition, budgeting, mindfulness, and more
• All Justworks offers include equity, and Justworkers can continue to earn more over time with promotions and tenure
• Extensive learning & development opportunities through workshops, ExecOnline, Udemy, and BetterUp coaching
• Apprenticeship program that supports internal movement and growth- Justworks is looking for an experienced security engineer skilled in detection and response, who can help enhance and mature Justworks’ Security
• Strong understanding of attacker behaviors, malware techniques, and modern threat landscapes
• Strong communication skills and comfort working cross‑functionally in a fast‑paced environment
• Hands‑on experience with EDR platforms (event analysis, detections, hunting)
• Proficiency with AWS security and logging services (CloudTrail, GuardDuty, IAM, VPC Flow Logs, Lambda, etc.)
• Interest in how AI/ML can enhance detection, hunting, and response workflows
• Experience designing and conducting attack & defend (table‑top) exercises
• Demonstrated ability to improve processes, reduce friction, and automate repetitive tasks
• 5+ years of hands-on experience in detection engineering, threat hunting, security event analysis, and incident response