SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 218,400 - 342,000 / annual
Scale is hiring a Security Engineer for its Public Sector Infrastructure & Security team. This is a hands-on security generalist role combining incident response, detection engineering, and security tooling development.
You will design and ship high-precision security detections across cloud services and enterprise SaaS platforms. Rather than just investigating incidents, you'll build the systems that detect, contain, and prevent them. Your responsibilities span both deep technical work (writing production-quality code) and strategic security architecture.
Key responsibilities:
- Engineer, test, and deploy detection logic across cloud and enterprise environments, treating detections as versioned software with peer review and measurable performance metrics.
- Build and maintain incident response automation, runbooks, and tooling that reduce containment timelines.
- Mature telemetry pipelines through improved schema design, normalization, enrichment, and quality checks to reduce false positives.
- Perform digital incident investigations and forensics to identify and contain security breaches.
- Conduct malware analysis to understand attack vectors and adversary methodologies.
- Integrate alerting with messaging and ticketing systems for fast, traceable response workflows.
- Partner cross-functionally with IT, security, and engineering teams to harden identity and access patterns and implement scalable guardrails.
- Utilize threat intelligence platforms to improve hunting, detection, and response workflows.
- Communicate incident significance and impact to both technical and non-technical stakeholders with actionable recommendations.
Required: Active Top Secret security clearance (non-negotiable).
Ideal background: 5+ years in Detection Engineering, Incident Response, or Security Operations with emphasis on building and shipping security tooling. Proficiency in Python, Go, NodeJS, TypeScript, and/or Kubernetes. Hands-on experience designing detection pipelines, SIEM content, and alerting workflows in cloud-native environments (AWS, GCP, Azure). Practical experience with SIEM, EDR, and SOAR tools. Strong understanding of modern cyber threats, attack techniques, and adversary TTPs. Familiarity with digital forensics tools and malware analysis. Relevant security certifications (GCIH, GCFA, GCIA, CISSP, GDSA) are a plus.
