Member of Technical Staff, SecOps & Threat Detection Engineer

About the Company

Envoy protects the places the world relies on most by unifying people, spaces, and communications in one secure, integrated workplace management platform and ecosystem. More than 16,000 workplaces around the world trust Envoy to run secure, compliant, and connected operations across every location.

Responsibilities

• Own the design and evolution of threat detection and security operations capabilities
• Define detection strategy across cloud infrastructure, applications, and endpoints
• Establish and improve SIEM and monitoring architecture, including signal quality and scalability
• Design and implement detection-as-code practices
• Drive visibility across all critical assets, including endpoints, services, and identities
• Take ownership of endpoint security monitoring and integration into centralized workflows
• Lead the design and rollout of automated security controls
• Define alerting strategy, severity models, and escalation paths
• Lead investigations into complex security signals and root cause analysis
• Partner with engineering teams to improve instrumentation and signal quality
• Define and track key metrics such as MTTD and MTTR
• Mentor and guide other engineers to raise team capability

Requirements

• 10+ years of experience in Security Engineering, SRE, or Infrastructure Engineering
• Proven experience designing or improving security monitoring, detection, or SIEM systems
• Strong understanding of cloud environments (ideally AWS), including IAM, networking, and logging
• Experience with endpoint detection and response tools (e.g., SentinelOne)
• Deep experience working with logs, events, and telemetry
• Strong programming or scripting skills in Python, Go, or similar
• Strong understanding of attacker behavior and threat translation
• Experience defining alerting models and reducing noise
• Ability to operate in ambiguous environments
• Strong cross-functional communication and influence skills