{"id":48902,"url":"https://alion.io/job/dropzone-detection-engineering-lead","title":"Detection Engineering Lead","company":{"id":10085,"name":"Dropzone AI","domain":"dropzone.ai","url":"https://alion.io/company/dropzone","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":200000,"max":250000,"currency":"USD","period":"year","gross":null,"usd_annual":250000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Cortex XDR","optional":false},{"name":"Crowdstrike","optional":false},{"name":"GCP","optional":false},{"name":"IBM QRadar","optional":false},{"name":"Linux","optional":false},{"name":"Machine Learning","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"SentinelOne","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Sumo Logic","optional":false},{"name":"Suricata","optional":false},{"name":"Windows","optional":false},{"name":"YARA","optional":false},{"name":"YARA","optional":false},{"name":"Zeek","optional":false}],"status":"live","first_seen_at":"2026-07-20T21:32:03Z","employer_posted_date":"2026-09-16","last_verified_at":"2026-10-16T14:47:03Z","board_verified":true,"closed_at":null,"days_open":87,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":87},"description":"About Dropzone AI\nDropzone’s mission is to scale cybersecurity beyond human limits, and augment every single human security engineer/analyst with an army of AI security specialists. Humans alone cannot sufficiently protect our digital future, and AI augmentation is the only way for defenders to reclaim the high ground. We are an award winning company disrupting the $200B+ cybersecurity market. \nPowered by Gen AI advancements, our technology offloads repetitive day-to-day work and frees human analysts to focus on real threats and higher-value projects. We are venture-backed, and our team has a rare blend of deep experience across cybersecurity, AI/ML, and SaaS product development. Join us if you want to be on the ground floor of using Gen AI to transform cyber defense. Learn more at www.dropzone.ai.\nAbout the role\nWe're looking for a highly experienced Senior / Principal Detection Engineer to help shape the future of AI-driven security operations. This is a senior-to-principal level role for an individual who combines deep detection engineering expertise with a passion for innovation, customer impact, and advancing the state of security operations.\nAs the Detection Engineering Lead, you will serve as one of Dropzone AI's foremost experts in adversary tradecraft, threat detection, detection efficacy evaluation, and SIEM content. You will work closely with product management and engineering teams to ensure our AI detection engineer can draft new detection contents and improve existing detection rules as well as the best detection engineer on the planet.\nThis role is part of the R&D team and you will focus on building the best software that replicates your expert intuitions and techniques. This is not a service or consulting role and you will not be performing hands-on detection engineering service to our customers.\nWhat you'll do\nDetection Engineering Leadership\nReimagine how having unlimited detection engineering capacity could change Detection and Response teams and how future security practitioners interact with an AI detection engineer\nPrototype, validate, and continuously improve an AI agent that programmatically generates detection content across diverse security environments.\nExperiment autonomous agentic loops between detection engineering and other D&R functions such as threat intelligence and threat hunting\nProduct Development\nPartner with engineering teams to encode expert detection knowledge into our product.\nDesign scoring rubrics on AI generated detection content for SIEM, EDR, NDR, cloud, identity, and SaaS security platforms.\nProvide guidance on detection methodologies used by mature SOCs.\nEstablish best practices for detection quality, tuning, testing, and lifecycle management.\nInfluence product roadmap decisions based on customer and operational needs.\nThreat Research & Innovation\nStay current on emerging threats, attacker techniques, and defensive strategies.\nConduct original research into detection opportunities and gaps.\nDevelop novel approaches for AI-assisted threat detection.\nRequirements\n5+ years of experience in detection engineering.\nDeep expertise with two or more major SIEM platforms (Microsoft Sentinel, Splunk, QRadar, Elastic, Chronicle, Sumo Logic, etc.).\nStrong understanding of endpoint, cloud, identity, network, and SaaS telemetry.\nExpertise in MITRE ATT&CK, adversary emulation, and detection coverage analysis.\nExperience building and tuning high-fidelity detections at scale.\nStrong understanding of modern attacker tradecraft across Windows, Linux, cloud, identity, and SaaS environments.\nExcellent communication skills with the ability to engage practitioners, executives, and customers.\nEarly-stage startup mindset. You thrive on ambiguity and move with lightspeed execution\nBeing data-driven is part of your DNA.\nPreferred\nExperience leading detection engineering programs at large complex environments.\nExpertise with EDR platforms such as CrowdStrike, Microsoft Defender, SentinelOne, or Palo Alto Cortex XDR.\nExperience with cloud security platforms including AWS, Azure, and GCP.\nFamiliarity with AI, machine learning, LLMs, or autonomous security workflows.\nExperience contributing to open-source detection content (Sigma, YARA, Suricata, Zeek, etc.).\nPublic speaking, research publication, or conference presentation experience.\nWork Environment/Travel\nWe are a 100% remote company where you will work from your home with company-provided equipment to set you up for success. Semi-frequent travel to professional office settings and other events locally and nationally; some overnight travel expected.\nCompensation\nIn the spirit of pay transparency, we are excited to share the base salary range below, exclusive of fringe benefits or potential bonuses. If you are hired at Dropzone your final base salary compensation will be determined based on factors such as geographic location, skills, education, and/or experience. In addition, all compensation packages include significant above market new hire equity grants because we believe in rewarding long term value creation. If you are hired at Dropzone your final base salary compensation will be determined based on factors such as geographic location, skills, education, and/or experience. In addition to those factors, we believe in the importance of pay equity and consider internal equity of our current team members as a part of any final offer. Please keep in mind that hiring at the maximum of the range would not be typical to allow for future and continued salary growth. We also offer a generous benefits package, including company paid health insurance, 401K Plan with employer match, Self-Managed PTO, parental leave, and more.\nThe pay range for this role is:\n$200,000—$250,000 USD","description_format":"text","description_chars":5749,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["401k plan","Equity","Health insurance","Parental leave"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Incident Response","Security Operations","Cybersecurity AI"],"lifecycle":[{"event":"open","at":"2026-07-20T21:32:03Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"green card filings: 1","filings_12m":0,"filings_prev_12m":0,"green_card_filings_12m":1,"median_offered_wage_usd":137500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":33,"band":"fade","label":"Fading","p_open":1,"p_active":0.75,"p_room":0.44,"age_days":87,"expected_fill_days":68,"reasons":["conf:0","win:tail","crowd:"],"computed_at":"2026-10-16T05:45:00Z"},"pay":{"stated_usd_annual":250000,"is_top_pay":true},"html_url":"https://alion.io/job/dropzone-detection-engineering-lead","json_url":"https://alion.io/job/dropzone-detection-engineering-lead.json","meta":{"generated_at":"2026-10-16T17:36:06Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2233,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":10085},"rest":"https://alion.io/mcp/rest/get_company?id=10085"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdropzone-detection-engineering-lead"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdropzone-detection-engineering-lead"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdropzone-detection-engineering-lead"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/dropzone-detection-engineering-lead\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdropzone-detection-engineering-lead"}]}