Senior Detection & Response Engineer

Save to Kiter
What Expel is looking for in applicants

Alright, close your eyes. Good. Now, I want you to picture the following person. This person has a real passion for detection. This person eats their Wheaties, with a side of freshly toasted attackers’ dreams of living off the land. As a defender, they think it’s cute that the attacker has the impression they can get by a layered defense by not dropping any binaries and just using Powershell, WMI, VBScript or the new hotness… and get away with it.

Please keep your eyes closed, we aren’t done visualizing. Next, imagine this person is fascinated by engineering principles. This person wishes unit tests for detections were as simple as importing pytest. They have a deep appreciation for what a great engineer can do with a hard problem. But they’re also someone who loves to solve hard engineering problems themselves, usually at the intersection of detection and response automation to make their lives, and their co-workers' lives, a little easier.

Finally, this person we’ve been picturing thrives in working with others. They might eat breakfast and destroy the dreams of attackers, but they genuinely love watching others be successful. They are someone who has trained and mentored others to investigate and respond to alerts generated by their research. They know that true scale comes from training others.

Now open your eyes. First off, I hope your eyes weren’t closed and you’re not someone who just blindly does what they’re told! Besides, how else could you have caught all the significant bits? Did you end up picturing yourself?

At Expel, we take a new approach to managed security. We spend our time trying to discover ways to keep our customers safe and our security analysts happy. We’re trying to meet our customers where they are - understanding a vast number of attacker tactics, security vendor capabilities, and customer requirements. We believe innovating while managing the combinatorial explosion represents a captivating problem. If you agree, we may have the job for you!

What Expel can do for you

  • Ensure your voice is heard and give you an opportunity to collaboratively drive a significant security capability of the business
  • Empower you to mentor and guide less experienced analysts in the practice you define
  • Enable you to learn from analysts, data scientists, engineers, and responders responsible for various components of Expel’s service and technology
  • Connect you with technical & security leads across the security market
  • Provide an entertaining and highly transparent startup environment
  • Provide access to a wide variety of popular security technologies
  • Challenge you to push the boundaries of our security vision

What you can do for Expel

  • Ensure our customers get maximum value from their security investments
  • Help ensure our analysts keep learning and doing more engaging security work
  • Identify the best approaches to power rapid detection, investigation, and response
  • Continuously improve our detection capability by developing and iterating on new detection ideas
  • Continuously reevaluate, redefine, extend, and refactor data sources and workflows as needed
  • Work with others across the organization to ensure quick time-to-market for new capability
  • Instill a culture of experimentation and continuous improvement within the analyst corps
  • Remain perpetually dissatisfied with the status quo. Help move us forward, always

What you should bring with you

  • Knowledge of attack vectors, threat tactics and attacker techniques
  • Experience with multiple SIEM, EDR and network technologies
  • Background in security operations and detection development
  • Hands-on experience developing in python or golang for the purposes of automating mundane tasks strongly preferred
  • Understanding of Windows & Linux operating systems, and networking fundamentals & protocols
  • Experience across a variety of offensive tools and tactics is a tremendous advantage
  • Bonus points for having experience with public cloud security architecture or detection and response

Additional Notes

At Expel, our employee benefits reflect our dedication to our crew. Unlimited PTO, equity for everyone, work location flexibility, up to 24 weeks of parental leave, and excellent health benefits are some of the ways we care for our Expletives.

Our office is based in Herndon, Virginia. However, we will consider remote work for this position.

We’re only hiring those authorized to work in the United States. We do not currently sponsor immigration visas.

We’re an Equal Opportunity Employer: You’ll receive consideration for employment without regard to race, sex, color, religion, sexual orientation, gender identity, national origin, protected veteran status, or on the basis of disability.

We’ll ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please let us know if you need accommodation of any kind.

Want some tips on how to get an interview at Expel?

What is Expel looking for?
If this role looks interesting to you, a great first step is to understand what excites you about the team, product or mission. Take your time thinking about this and then tell the team! Get in touch and communicate that passion.
What are interviews for Senior Detection & Response Engineer like?
Interview processes vary by company, role and team. The best plan is to see what others have experienced and then plan accordingly.
How to land an interview at Senior Detection & Response Engineer?
A great first step is organizing your path to an offer. Check out Kiter for tools to get started!