Detection Engineer (Protective Services)

Location: Remote within the United States

Salary: $130,600–$192,000 USD annual base salary, plus potential equity grants.

Company

hirify.global is an on-demand logistics platform operating across more than 40 countries, with Global Safety and Security protecting people, property, operations, brand, and reputation.

What you will do

• Translate threat intelligence, incidents, investigative needs, and observed behavior into production detections that identify meaningful risk and reduce noise.
• Build, test, deploy, tune, and maintain detections, enrichment, automation, and supporting data pipelines using source-controlled engineering practices.
• Correlate enterprise telemetry, marketplace activity, physical security events, support interactions, cloud and identity signals, and OSINT.
• Investigate detections by querying data, validating hypotheses, and assessing confidence, scope, and potential impact with Protective Services partners.
• Use investigation outcomes, false positives, missed indicators, and operational friction to improve detection logic, tooling, and workflows.
• Contribute to technical reviews, testing, documentation, standards, automation, on-call support, and major investigations.

Requirements

• 3+ years of experience in detection engineering, threat hunting, incident response, security operations engineering, technical threat intelligence, or security-focused software engineering.
• Experience contributing to production detection pipelines with source control, testing, review, deployment, and monitoring.
• Proficiency in SQL or a security query language and maintainable programming in Python, Go, or another relevant language.
• Strong analytical, investigation, troubleshooting, collaboration, and communication skills, including the ability to handle sensitive information.
• Experience correlating security, behavioral, or other relevant telemetry and assessing alert confidence, scope, and evidence.
• Bachelor’s degree or equivalent practical experience.

Nice to have

• Exposure to identity, endpoint, cloud, marketplace, physical security, OSINT, or unstructured data.
• Experience with automation, analytics, machine learning, or LLM-based techniques for detection and investigation workflows.
• Familiarity with MITRE ATT&CK or D3FEND.
• Experience with Snowflake, Cortex, or Google SecOps.

Culture & Benefits

• Hands-on work across code, queries, data pipelines, detection repositories, and production systems.
• Collaboration with engineering, investigative, response, and Protective Services teams.
• On-call rotation and support for major investigations.
• 401(k) with employer matching, paid parental leave, wellness and commuter benefits, paid time off, and paid sick leave.
• Medical, dental, vision, disability, life insurance, family-forming assistance, and mental health benefits.