{"id":2620086,"url":"https://alion.io/job/synopsys-detection-engineer-sr-staff-engineer-19265","title":"Detection Engineer , Sr Staff Engineer, 19265","company":{"id":39954,"name":"Synopsys","domain":"synopsys.com","url":"https://alion.io/company/synopsys-inc","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Avature","truth_index":{"grade":"A","score":100,"open_postings":83,"ghost_share":0.036,"stale_share":0,"repost_share":0.181,"time_to_fill_p50_days":14,"computed_at":"2026-10-16T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Greece"],"countries":["GR"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":41000,"max_usd":99000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":617},"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"DLP","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Python","optional":false},{"name":"Red Teaming","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-10-15T13:07:24Z","employer_posted_date":"2026-10-15","last_verified_at":"2026-10-16T12:58:58Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Job Description and Requirements\nWe Are\nSynopsys is the leader in engineering solutions from silicon to systems, enabling customers to rapidly innovate AI-powered products. We deliver industry-leading silicon design, IP, simulation and analysis solutions, and design services. We partner closely with our customers across a wide range of industries to maximize their R&D capability and productivity, powering innovation today that ignites the ingenuity of tomorrow.\nYou Are\nYou have deep experience building detections that actually work in production, where alert volume matters as much as coverage and where a false positive rate that looks fine on paper can quickly overwhelm an investigation team. You understand that the difference between a detection that gets used and one that gets muted often comes down to how well telemetry, attacker behavior, and operational reality are balanced.\nYou don't wait for perfect log sources. When the available telemetry doesn't support what a stakeholder wants, you define the constraint clearly, identify what is feasible, and build agreement on the path forward. You think in detection lifecycles rather than one off rules, building reusable components, tuning based on investigator feedback, and documenting what response teams need to effectively work an alert.\nInsider risk and DLP work doesn't intimidate you. You understand that detecting risky user behavior requires different techniques from detecting external threats, and you're ready to extend a building block approach across multiple log sources to help develop user risk ranking. At Synopsys, you'll own complex detection problems from intake through production and help shape how the team approaches detection engineering.\nWhat You'll Be Doing\nDetermine the methods, techniques, and evaluation criteria for new detection assignments, balancing telemetry coverage, attacker behavior, alert volume, and operational cost\n\nDrive the insider risk and DLP detection project, extending the building block approach across multiple log sources as you help build user risk ranking\n\nOwn committed detections through production readiness by confirming target behavior, selecting supporting telemetry, testing detection logic, documenting expected false positives, and providing response guidance for Incident Response and Insider Threat teams\n\nTune existing detection content using investigator feedback, alert volume, and precision metrics to improve the quality and actionability of alerts\n\nUse MITRE ATT&CK and the current threat landscape to identify coverage gaps and prioritize detections that address meaningful risks\n\nEvaluate and apply AI assisted workflows where they can improve detection development, enrichment, or triage, validating results before operational use\n\nCoach detection engineers earlier in their careers on design decisions, testing discipline, tuning strategy, and production readiness\n\nThe Impact You Will Have\nMore actionable insider risk and DLP alerts, giving Incident Response and Insider Threat investigators clearer signals to review while reducing effort spent on low value results\n\nA repeatable detection lifecycle built on shared methods, consistent evaluation criteria, and reusable components rather than isolated rules\n\nStronger design and tuning decisions across the team as developing detection engineers apply consistent production readiness standards\n\nShorter development and investigation cycles through validated AI assisted workflows for detection development, enrichment, and triage\n\nA detection library designed around available telemetry, real operational conditions, and the needs of the teams responding to alerts\n\nClearer alignment between detection engineering and program stakeholders when available telemetry can't support a request, including agreement on what is feasible and what additional data would be required\n\nWhat You'll Need\nBachelor's degree and a minimum of 6 years of related experience, or an advanced degree and a minimum of 5 years of related experience in detection engineering, security operations, red teaming, insider threat, or incident response, with substantial experience building detection content\n\nExperience building detection content in an enterprise SIEM. Elastic experience is strongly preferred\n\nExperience working with security telemetry from EDR, firewalls, IDS/IPS, cloud platforms, DLP, or similar enterprise sources\n\nExperience applying incident response, investigation, or security operations knowledge to detection design. Experience supporting insider threat or DLP programs is highly relevant, but deep detection engineering expertise is the primary requirement\n\nWorking knowledge of MITRE ATT&CK and its application to detection design\n\nProficiency in Python or another relevant programming language, with familiarity with Detection as Code, CI/CD, and security automation\n\nWho You Are\nComfortable making sound technical decisions on complex or unfamiliar problems with limited supervision, selecting an appropriate approach and evaluation criteria without requiring a detailed specification\n\nPrecise about what a log source can support and able to align partner teams on what is feasible when available telemetry cannot meet a request\n\nFocused on outcomes, building detections that hold up once real alerts start firing and provide investigators with actionable signals\n\nComfortable leading a deep body of work, starting with insider risk and DLP telemetry before moving to the next committed priority\n\nGenerous with technical judgment and feedback, helping other engineers improve how they design, test, and tune detections\n\nPragmatic about AI, identifying workflows where it can add value while validating results before operational use\n\nThe Team You'll Be Part Of\nYou will report to the Senior Manager of Cyber Security Engineering, based in Austin, Texas. The team is distributed across multiple countries, including colleagues in Greece, and operates in a global environment. The detections you build will feed directly into Incident Response and Insider Threat teams, so you will work closely with investigators who depend on your content to surface actionable signals.\nRewards and Benefits\nWe offer a comprehensive range of health, wellness, and financial benefits to cater to your needs. Our total rewards include both monetary and non-monetary offerings. Your recruiter will provide more details about the salary range and benefits during the hiring process.\nAt Synopsys, we want talented people of every background to feel valued and supported to do their best work. Synopsys considers all applicants for employment without regard to race, color, religion, national origin, gender, sexual orientation, age, military veteran status, or disability.","description_format":"text","description_chars":6750,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["EDA Software","Simulation & Digital Twin Software","Semiconductor IP & Chip Design Services"],"lifecycle":[{"event":"open","at":"2026-10-15T13:07:24Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":0,"expected_fill_days":14,"reasons":["conf:2","velocity","win:early","comp:brand"],"computed_at":"2026-10-16T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/synopsys-detection-engineer-sr-staff-engineer-19265","json_url":"https://alion.io/job/synopsys-detection-engineer-sr-staff-engineer-19265.json","meta":{"generated_at":"2026-10-16T13:19:15Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":12785,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":39954},"rest":"https://alion.io/mcp/rest/get_company?id=39954"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsynopsys-detection-engineer-sr-staff-engineer-19265"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsynopsys-detection-engineer-sr-staff-engineer-19265"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsynopsys-detection-engineer-sr-staff-engineer-19265"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/synopsys-detection-engineer-sr-staff-engineer-19265\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsynopsys-detection-engineer-sr-staff-engineer-19265"}]}