Senior Staff Detection Engineer

About the role

Synopsys, a leader in engineering solutions from silicon to systems, is looking for a Senior Staff Detection Engineer to own complex detection problems from intake through production. The role focuses on insider risk and DLP detections, building reusable detection components and tuning them with investigator feedback. It reports to the Senior Manager of Cyber Security Engineering, based in Austin, Texas, within a distributed team.

Key responsibilities

• Determine methods, techniques and evaluation criteria for new detections, balancing telemetry coverage, attacker behavior, alert volume and operational cost.
• Drive the insider risk and DLP detection project, extending a building-block approach across multiple log sources to build user risk ranking.
• Own detections through production readiness: confirm target behavior, select telemetry, test detection logic, document expected false positives and give response guidance to Incident Response and Insider Threat teams.
• Tune existing detections using investigator feedback, alert volume and precision metrics.
• Use MITRE ATT&CK and the threat landscape to find coverage gaps and prioritize meaningful risks.
• Evaluate and apply AI-assisted workflows where they improve detection development, enrichment or triage, validating results before use.
• Coach junior detection engineers on design, testing, tuning and production readiness.

Required profile

• Bachelor's degree and 6 years of related experience, or an advanced degree and 5 years, in detection engineering, security operations, red teaming, insider threat or incident response.
• Substantial experience building detection content.
• Experience with enterprise SIEMs (Elastic strongly preferred).
• Experience with security telemetry from EDR, firewalls, IDS/IPS, cloud platforms, DLP or similar sources.
• Experience applying incident response and investigation knowledge to detection design; insider threat or DLP experience is highly relevant.

Required skills

• Working knowledge of MITRE ATT&CK.
• Proficiency in Python or another programming language.
• Familiarity with Detection as Code, CI/CD and security automation.

The role suits someone comfortable making technical decisions with limited supervision, focused on actionable alerts and willing to lead a deep body of work.