{"id":566605,"url":"https://alion.io/job/vectra-senior-detection-engineer-cloud","title":"Senior Detection Engineer - Cloud","company":{"id":22674,"name":"Vectra AI","domain":"vectra.ai","url":"https://alion.io/company/vectra","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":79,"open_postings":10,"ghost_share":0,"stale_share":0.8,"repost_share":0.1,"time_to_fill_p50_days":32,"computed_at":"2026-10-16T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":24000,"max_usd":52000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Databricks","optional":false},{"name":"GCP","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"MITRE D3FEND","optional":false},{"name":"Pandas","optional":false},{"name":"Python","optional":false},{"name":"SQL","optional":false},{"name":"Vectra AI","optional":false},{"name":"Suricata","optional":true},{"name":"Wireshark","optional":true},{"name":"Zeek","optional":true}],"status":"live","first_seen_at":"2026-08-04T08:45:17Z","employer_posted_date":"2026-09-30","last_verified_at":"2026-10-17T01:27:46Z","board_verified":true,"closed_at":null,"days_open":73,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":73},"description":"Vectra® is the leader in AI-driven threat detection and response for hybrid and multi-cloud enterprises.\nThe Vectra AI Platform delivers integrated signal across public cloud, SaaS, identity, and data center networks in a single platform. Powered by patented Attack Signal Intelligence, it empowers security teams to rapidly prioritize, investigate and respond to the most advanced cyber-attacks. With 35 patents in AI-driven threat detection and the most vendor references in MITRE D3FEND, organizations worldwide rely on the Vectra AI to move at the speed and scale of hybrid attackers. For more information, visit www.vectra.ai. \nPosition Overview \nWe are seeking an experienced Threat Detection Engineerto extend Vectra's detection capabilities across cloud and identity environments, with additional exposure to network-based threat detection. \nVectra's Attack Signal Production Group is responsible for building Vectra's core threat detection and prioritization technology, leveraging AI and other methods to alert customers to critical threats across their cloud, identity, and network environments. \nThreatDetection Engineers work closely with Data Scientists who are developing AI models, and Security Researchers who are researching thethreatlandscapeand assisting modelingefforts. This role will focus primarily on developing detections for cloud and identity attack behaviours, including threats across AWS, Azure, GCP, and identity platforms such as Microsoft Entra ID. \nThe ideal candidate has hands-on experience investigating cloud and identity threats using telemetry such as authentication and audit logs, CloudTrail, cloud platform logs, and network flow data. Familiarity with network threat models, protocols, and network-based telemetry is important, particularly as cloud detection increasingly incorporates data sources such as VPC and flow logs. \nThe role is primarily focused on cloud and identity threat detection, while providing the versatility to contribute to network detection initiatives where relevant. \nResponsibilities and Accountabilities \nResearch cloud and identity attack behaviours and identify opportunities for new detections. \nDevelop, test, and maintain detection logic using Python and other appropriate detection technologies. \nAnalyze telemetry from cloud and identity environments, including authentication activity, control-plane activity, audit logs, application logs, and network flow logs. \nDevelop detections across common cloud platforms such as AWS, Azure as well as identity environments such as Microsoft Entra ID. \nInvestigate malicious activity and reproduce attacker techniques to validate detection hypotheses. \nCollaborate with Data Scientists and Security Researchers to improve detection coverage and accuracy. \nContinuously assess detection effectiveness and improve detections based on real-world data. \nStay current with emerging cloud, identity, and network attacker techniques and TTPs. \nWork with large and diverse security datasets using technologies and techniques such as Python, notebooks, SQL, Pandas, and cloud analytics platforms. \nContribute to network threat detectionwhere appropriate, including analysis of network protocols, flow data, PCAPs, and network attack behaviours. \nAttitudes and Behaviours \nFocus on impact and results; work on the right problems and drive them through to completion. \nDemonstrate curiosity and a strong investigative mindset when working with unfamiliar attacker behaviours, telemetry, or technologies. \nShow drive and resourcefulness in overcoming technical ambiguity and incomplete information. \nHave a track record of successfully solving complex and ambiguous problems. \nBalance detection coverage with detection quality, scalability, and maintainability. \nDemonstrate high integrity and an ability to collaborate effectively across Security Research, Data Science, Engineering, and Product teams. \nQualifications and Experience \n6+ years of cybersecurity experience, preferably focused on threat detection, security research, threat hunting, incident response, or detection engineering. \nStrong experience investigating threats in cloud and identity environments. \nHands-on knowledge of AWS/Azure cloud platform. \nStrong understanding of identity concepts, cloud and identity attack techniques; experience with Microsoft Entra IDis preferred. \nExperience working with security telemetry such as CloudTrail, cloud audit logs, authentication logs, flow logs, PCAPS and network telemetry. \nWorking proficiency in Python, including experience using Python for data analysis, automation, investigation, or detection development. \nWorking knowledge of network security fundamentals, protocols, and network threat models. \nFamiliarity with large-scale analytics or data platforms such as Databricks, cloud-native log analytics platforms, or equivalent technologies. \nExcellent technical, analytical, communication, and collaboration skills. \nPreferred Experience \nExperience building and operating production-quality cloud or identity detections, rather than solely investigating alerts generated by existing products. \nExperience developing detections using multiple telemetry sources or correlating activity across identity, cloud control-plane, workload, and network data. \nExperience with adversary simulation or offensive security techniques in AWS, Azure or identity environments. \nExperience analyzing network traffic using tools such as Wireshark, Zeek, Suricata, or similar technologies. \nOptional certifications such as OSCP, GCIA, GCDA, GSEC, cloud security certifications, or equivalent practical experience. \nVectra provides a comprehensive total rewards package that supportsthe financial, physical, mental and overall health of our employees and their families. Compensation includes competitive base pay, incentive plan eligibility, and participation in the employee equity plan (stock options). Specific benefitsofferedvariesby location, but commonly include health care insurance, income protection/ life insurance, access to retirement savings plans, behavioral & emotional wellness services, generous time away from work, and a comprehensive employee recognition program.\nVectra is committed to creating a diverse environment and is proud to be an equal opportunity employer. \nWe are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status.","description_format":"text","description_chars":6524,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Life insurance","Retirement plans","Stock options"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Network Security","Threat Intelligence","Security Operations","Cybersecurity AI"],"lifecycle":[{"event":"open","at":"2026-09-09T09:50:07Z"}],"visa":[],"liveness":{"score":14,"band":"cold","label":"Long shot","p_open":1,"p_active":0.485,"p_room":0.28,"age_days":72,"expected_fill_days":32,"reasons":["conf:1","stale_co","velocity","win:tail","crowd:"],"computed_at":"2026-10-16T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/vectra-senior-detection-engineer-cloud","json_url":"https://alion.io/job/vectra-senior-detection-engineer-cloud.json","meta":{"generated_at":"2026-10-17T03:30:59Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4567,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":22674},"rest":"https://alion.io/mcp/rest/get_company?id=22674"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fvectra-senior-detection-engineer-cloud"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fvectra-senior-detection-engineer-cloud"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fvectra-senior-detection-engineer-cloud"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/vectra-senior-detection-engineer-cloud\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fvectra-senior-detection-engineer-cloud"}]}