Detection & CorpSec Engineer (Remote)

Stack

Responsibilities

• ▹Build and maintain a SIEM to collect and analyze logs from corporate and production systems; write and deploy detections and alerts
• ▹Design and deploy canary tokens and early warning mechanisms to detect threats before they reach critical assets
• ▹Investigate security incidents end-to-end - including malware analysis, exfiltration assessment and timeline reconstruction - and build runbooks to scale response
• ▹Partner with IT to define and enforce security standards across the employee device fleet: endpoint protection, managed device requirements, OS compliance and VPN access controls
• ▹Drive the PoC and implementation of Zero-Trust VPN and other corporate security infrastructure
• ▹Provide security guidance and advisory support to non-engineering functions across the organization

Requirements

• ▹Availability for meetings during Quora's coordination hours (Mon-Fri, 9am-3pm Pacific Time)
• ▹5+ years of experience in security engineering, detection engineering or a closely related field
• ▹Hands-on experience building or maintaining SIEM infrastructure and writing detection rules
• ▹Experience with endpoint security tools

Soft skills

About the company

Quora's Security team is responsible for protecting the company's most critical assets from both external threats and insider risks. It's a small, high-ownership team with a pragmatic, builder-oriented approach, building where commercial solutions don't fit and leveraging AI to work efficiently at scale.