SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Obsidian Security is a leading SaaS security platform protecting 200+ global enterprises including Fortune 1000 companies. Founded in 2017 and backed by top-tier investors like Greylock, the company specializes in securing SaaS applications where business happens—Microsoft 365, Salesforce, and hundreds more.
This Senior Threat Research Engineer role will establish and lead detection engineering capabilities within Obsidian's growing Taiwan organization. You will be responsible for developing security detections that identify identity threats, malicious activity, risky behavior, and emerging attack patterns across cloud and SaaS environments.
Key responsibilities include:
- Leading the technical direction, operating model, quality standards, and hiring plan for the Taiwan detection engineering function
- Researching cloud, identity, and SaaS threats and translating attacker behaviors into actionable detection opportunities
- Developing comprehensive threat models covering attack paths, adversary techniques, identity misuse, and control failures
- Designing, authoring, testing, and maintaining detection rules and behavioral detection models
- Defining telemetry, enrichment, correlation, and historical context requirements for effective detections
- Partnering with platform and data engineering teams to build scalable detection capabilities and production processing pipelines
- Developing frameworks for detection testing, simulation, coverage measurement, versioning, and release management
- Measuring and improving detection precision, recall, explainability, performance, and customer value
- Investigating false positives and negatives to identify root causes and improve detection logic
- Mapping detection coverage to threat frameworks, attack techniques, and customer risks
- Monitoring the evolving threat landscape and rapidly developing coverage for new techniques
- Collaborating with Product Management and Customer Success to understand customer environments and requirements
- Creating clear documentation explaining detection intent, evidence, behavior, limitations, and response actions
- Collaborating across Taiwan, US, UK, and Australia offices to build a unified global detection program
Required qualifications include significant experience in detection engineering, threat research, security analytics, incident response, or threat hunting. You should have experience leading security research initiatives and mentoring practitioners, strong knowledge of attacker behavior and identity threats, demonstrated experience developing production detections using rules/queries/correlations/statistical methods, and experience working with large security datasets including audit events, authentication activity, and cloud telemetry.
