{"id":2985637,"url":"https://alion.io/job/aurora-staff-security-engineer-cloud-detection-response","title":"Staff Security Engineer, Cloud Detection & Response","company":{"id":40481,"name":"Aurora Innovation","domain":"aurora.tech","url":"https://alion.io/company/aurora-tech","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":null},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Mountain View, United States","San Francisco, United States","Pittsburgh, United States","Seattle, United States","Dallas, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":162000,"max":260000,"currency":"USD","period":"year","gross":null,"usd_annual":260000},"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"CI/CD","optional":false},{"name":"Incident Management","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"NIST CSF","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"ISO 27001","optional":true},{"name":"LLM","optional":true},{"name":"SOC 2","optional":true},{"name":"Zero Trust","optional":true}],"status":"live","first_seen_at":"2026-10-05T17:12:16Z","employer_posted_date":"2026-10-05","last_verified_at":"2026-10-28T16:54:18Z","board_verified":true,"closed_at":null,"days_open":23,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":23},"description":"Who we are\nAurora’s mission is to deliver the benefits of self-driving technology safely, quickly, and broadly.\nThe Aurora Driver will create a new era in mobility and logistics, one that will bring a safer, more efficient, and more accessible future to everyone.\nAt Aurora, you will tackle massively complex problems alongside other passionate, intelligent individuals, growing as an expert while expanding your knowledge. For the latest news from Aurora, visit aurora.tech or follow us on LinkedIn.\nWhat we are looking for\nWe're searching for a Staff Cybersecurity Engineer to help mature Cloud & Enterprise Detection within our Detection & Response (D&R) team, under the Technical Assurance division. This is a senior individual contributor role focused on driving cross-functional projects that strengthen Aurora's detection infrastructure and expand detection coverage across our cloud infrastructure, enterprise environments. You will scope and lead multi-quarter initiatives that raise the maturity of our detection program and powering detection at scale, executing through your own hands-on work and through close partnership with Cloud Infrastructure, IT, and Platform Engineering teams.\nIn this role you will\nDrive cross-functional projects to mature Aurora's detection infrastructure, log ingestion and normalization, detection-as-code pipelines with testing, versioning, and CI/CD for detection content, and scalable, cost-aware telemetry collection\n\nExpand detection coverage across cloud and corporate environments and prioritize coverage improvements\n\nDesign, build, and tune detections for cloud control plane and workload activity, identity-based attacks, endpoint, SaaS threats, abuse of CI/CD and service-to-service communication paths\n\nPartner with Cloud Infrastructure, IT, and Platform Engineering to embed logging and detection requirements into system design, and represent D&R in cross-functional working groups and design reviews\n\nIntegrate threat intelligence and adversary emulation into detection coverage priorities, and conduct proactive threat hunting across cloud, identity, endpoint, and SaaS data\n\nRespond to cloud and enterprise security incidents and participate in an on-call rotation, feeding lessons learned back into detection coverage and infrastructure improvements\n\nCollaborate with and mentor SOC engineers on cloud and enterprise detection practices, and contribute to quarterly planning for detection infrastructure and coverage initiatives\n\nRequired qualifications\n10+ years of security experience; demonstrated experience leading cross-functional security projects or programs from scoping through delivery\n\nStrong technical foundation in threat detection, incident response\n\nExpertise with cloud security across one or more major providers, including cloud-native telemetry and detection sources\n\nExperience building or maturing detection infrastructure - SIEM or security data lake pipelines, log onboarding and normalization, detection-as-code workflows\n\nExpertise with endpoint detection and response (EDR) and SaaS security monitoring, or comparable host and application telemetry depth\n\nExpertise authoring and maintaining detections (anomalous, network, host, identity, or cloud activity) and measuring detection coverage against adversary behavior\n\nExperience with incident management, driving cross-departmental collaboration for containment and remediation\n\nExpertise with MITRE ATT&CK framework and modern adversarial techniques; understanding of NIST CSF\n\nAbility to write quality, testable code in Python\n\nDesirable qualifications\nExperience designing and implementing Zero Trust Architecture\n\nExperience scaling SOC, Detection Engineering with AI/LLM\n\nExperience building and architecting data lakes\n\nExperience with compliance frameworks (SOC 2, ISO 27001)\n\nFor roles based in Mountain View: The salary range for this position is $162,000 - $260,000 per year.\nFor roles based in Pittsburgh, PA,: The salary range for this position is $146,000 - $234,000 per year.\nAurora’s pay ranges are determined by role, level, and location. Within the range, the successful candidate’s starting base pay will be determined based on factors including job-related skills, experience, qualifications, relevant education or training, and market conditions. These ranges may be modified in the future. The successful candidate will also be eligible for an annual bonus, equity compensation, and benefits.\nWorking at Aurora\nAt Aurora, we bring together extraordinarily talented and experienced people united by the strength of our values. We operate with integrity, set outrageous goals, and build a culture where we win together - all without any jerks.\nWe believe in-person work increases collaboration, empathy, and our ability to lead effectively. As a result, Aurorans are expected to work from the office at least 3 days per week, with some roles requiring more frequent in-office presence, up to 5 days per week, based on operational needs.\nOurCareers page provides insight into what it is like to work at Aurora, and you can find all the latest updates in our Newsroom.\nOur commitment to safety\nAt the core of everything we do is our commitment to safety. Building best-in-class self-driving technology will take time, and we believe that each employee at Aurora has a role in contributing to safety, every step of the way. Aurora expects commitment to our safety policies from every employee, and seeks candidates who take an active responsibility, can contribute to building an atmosphere of trust, and invest in the organization’s long-term success by prioritizing working safely, no matter what.\nOur commitment to inclusion\nAurora considers candidates without regard to their race, color, religion, national origin, age, sex, gender, gender identity, gender expression, sexual orientation, marital status, pregnancy status, parent or caregiver status, ancestry, political affiliation, veteran and/or military status, physical or mental disability, or any other status protected by federal or state law. Aurora considers qualified applicants with criminal histories, consistent with applicable federal, state, and local law. We are also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, you may contact us at .\nFor California applicants, information collected and processed as part of your application and any job applications you choose to submit is subject to Aurora’s California Employment Privacy Policy.","description_format":"text","description_chars":6666,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Autonomous Driving","Logistics"],"lifecycle":[{"event":"open","at":"2026-10-21T08:21:37Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":22,"expected_fill_days":69,"reasons":["conf:2","velocity","win:early","comp:brand"],"computed_at":"2026-10-28T05:59:10Z"},"pay":{"stated_usd_annual":260000,"is_top_pay":true},"html_url":"https://alion.io/job/aurora-staff-security-engineer-cloud-detection-response","json_url":"https://alion.io/job/aurora-staff-security-engineer-cloud-detection-response.json","meta":{"generated_at":"2026-10-28T18:25:57Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":25163,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-29T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":40481},"rest":"https://alion.io/mcp/rest/get_company?id=40481"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Faurora-staff-security-engineer-cloud-detection-response"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Faurora-staff-security-engineer-cloud-detection-response"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Faurora-staff-security-engineer-cloud-detection-response"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/aurora-staff-security-engineer-cloud-detection-response\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Faurora-staff-security-engineer-cloud-detection-response"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":2985637}},{"tool":"search_jobs","arguments":{"company":"aurora.tech","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":2985637},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}