Threat Detection & Response Engineer III

True Anomaly • Long Beach, CA

5d • Onsite

About The Position

True Anomaly is hiring a Threat Detection & Response Engineer III to help build and mature its threat detection and response function. The role designs and implements security detections, improves incident response procedures, and contributes to the security tooling and processes that support the company’s security operations program. The position requires an active security clearance and is based onsite at the company’s Long Beach office.

The engineer will monitor and respond to security alerts, investigate incidents, hunt for threats, administer detection platforms, and develop automation. The role works with teams including IT, Engineering, Legal, and Compliance, and requires autonomy and adaptability in a fast-paced, high-stakes environment. Participation in an on-call rotation, including after-hours coverage, is required.

Requirements

• Active Secret or TS security clearance and ability to maintain a security clearance.
• At least 3 years of cybersecurity experience, including at least 2 years focused on security operations, detection engineering, incident response, or threat hunting.
• Experience building or tuning security detections.
• Familiarity with risk-based alerting and alert tuning, including reducing noise, improving detection fidelity, and prioritizing high-signal alerts.
• Familiarity with EDR platforms, including basic alert triage and response actions.
• Working knowledge of Windows, macOS, or Linux endpoint security and common attack techniques.
• Familiarity with SIEM platforms and log analysis, such as Splunk, Elastic, or similar.
• Basic understanding of common attack vectors, adversary TTPs, and security frameworks such as MITRE ATT&CK and the Cyber Kill Chain.
• Experience scripting in Python, PowerShell, or Bash for automation or analysis tasks.
• Clear verbal and written communication skills.
• Ability to work onsite at the Long Beach office.
• Ability to participate in an on-call rotation, including after-hours incident response coverage.
• Must be comfortable working under pressure during active security incidents.
• Must meet the stated U.S. Government space technology export regulation eligibility requirements.

Nice To Haves

• Knowledge of digital forensics and malware analysis techniques.
• Experience building or significantly maturing a detection and response program.
• Experience working in Azure Government Cloud (Azure GovCloud) environments.
• Experience with cloud security monitoring in AWS, GCP, or Azure commercial environments.
• Familiarity with CMMC, FedRAMP, NIST 800-53, or other federal compliance frameworks.
• Experience with Detections-as-Code paradigms, GitOps, CI/CD, or similar.
• Experience participating in or supporting red team or purple team exercises.

Responsibilities

• Develop incident response plans, playbooks, and standard operating procedures, and build scalable processes to support future team growth.
• Design and implement custom security detections across corporate and cloud environments, leveraging frameworks such as MITRE ATT&CK.
• Tune detection rules and develop threat models to improve fidelity and address coverage gaps.
• Monitor, triage, and respond to security alerts across multiple platforms and data sources.
• Investigate incidents through technical analysis, containment, eradication, and recovery, and document findings and lessons learned.
• Proactively hunt for threats and use threat intelligence to anticipate emerging adversary tactics, techniques, and procedures.
• Administer and optimize EDR and SIEM platforms, and integrate log sources to improve visibility and correlation.
• Build automation and orchestration workflows to improve response efficiency.
• Partner with IT, Engineering, Legal, and Compliance, and communicate technical findings to diverse stakeholders.

Benefits

• Company-paid medical, dental, and vision coverage for employees and dependents, with HSA/HRA options.
• Flexible Time Off for exempt employees or accrued PTO of up to 25 days for non-exempt employees.
• 12 paid holidays.
• Parental leave and sick leave.
• Daily catered lunch and unlimited snacks for in-office employees.
• 401(k) retirement plan.
• Fitness reimbursement.
• Equity participation.
• Professional development and certification support.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed