Senior Security Engineer, Detection Engineering

Details

NVIDIA Security is seeking a Senior Detection Engineer to join the Detection and Automation Engineering team. The team builds reliable detection coverage that helps responders identify real threats quickly, reduce unnecessary noise, and protect NVIDIA's enterprise, cloud, developer, AI, and production environments.

The role involves turning sophisticated security signals into detections responders can trust, moving from hypotheses to tested production content, and clearly explaining detection tradeoffs. The engineer will work closely with incident response, threat intelligence, security operations, cloud security, and engineering teams. Detection content should be explainable, measured, maintainable, and useful during real investigations.

Responsibilities

• Build and tune high-confidence detections across Splunk, Microsoft Sentinel, Microsoft Defender, CrowdStrike, cloud-native logs, identity telemetry, endpoint data, SaaS platforms, and developer systems.
• Translate incidents, threat hunts, threat intelligence, red-team findings, and vulnerability context into testable and operational detection logic.
• Investigate real telemetry before creating alerts, including field behavior, timing, joins, baselines, and likely false positives.
• Drive the full detection lifecycle, including design, query development, validation, peer review, documentation, deployment, tuning, monitoring, and retirement.
• Strengthen detection-as-code workflows through test data, quality checks, metadata, rollout safety, coverage tracking, and detection health reporting.
• Partner with responders to reduce noise, add useful context, improve severity decisions, and create follow-up detections after investigations.
• Shape logging, normalization, enrichment, and retention requirements when required telemetry is missing or difficult to use.
• Coach analysts and engineers through design reviews, query reviews, and guidance on credible detections.

Requirements

• 8+ years of experience in detection engineering, security engineering, threat hunting, incident response, SOC engineering, or information security monitoring.
• Degree in Computer Science, Cybersecurity, Engineering, or equivalent experience.
• Hands-on experience building and tuning detections in a major SIEM or security analytics platform.
• Strong query and scripting skills, especially SPL, KQL, SQL, Python, or similar languages used to analyze security telemetry and automate repetitive work.
• Practical understanding of attacker behavior across identity, endpoint, cloud, network, email, collaboration tools, developer infrastructure, secrets, and data theft.
• Ability to move from raw logs to production-ready detections, including field semantics, thresholds, joins, baselines, false positives, missing data, and triage context.
• Experience with Git, code review, automated checks, CI/CD, documentation, and operational ownership of shipped content.
• Clear communication and sound judgment, including the ability to explain why a detection matters, what it misses, what should happen next, and when not to alert.

Preferred Qualifications

• Experience leading or materially improving a detection-as-code program across multiple security platforms.
• Background in cloud, identity, Kubernetes, CI/CD, supply-chain, or AI-tooling attack paths.
• Experience detecting abuse in developer systems, package ecosystems, secrets workflows, AI coding tools, agents, bots, or model-serving infrastructure.
• Experience working with incident response, threat hunting, red team, purple team, malware analysis, or forensics teams.
• Experience building validation methods such as replay tests, synthetic telemetry, attack emulation, detection unit tests, or coverage reporting.

Compensation and Benefits

The base salary range is USD 168,000–270,250 for Level 4 and USD 196,000–310,500 for Level 5. Base salary is determined based on location, experience, and the pay of employees in similar positions. The role also includes eligibility for equity and benefits.

Applications will be accepted at least until August 18, 2026. This posting is for an existing vacancy. NVIDIA uses AI tools in its recruiting processes and is an equal opportunity employer.