Detection & CorpSec Engineer (Remote)
Quora · Remote · Remote - Multiple Locations · United States · Canada ·
COMPENSATION
€•• – ••k
Listed on the employer's job board (Ashby)
- Fully remote (US/Canada)
- 5+ years experience
- Python + SIEM
- Incident response
- Zero-Trust architecture
Join Quora's Security team to strengthen preventative and detection capabilities across corporate and production environments. You will build detection systems, manage endpoint security, and serve as a security advisor to non-technical teams while supporting both Quora and Poe products.
What you'll do
- Build and maintain SIEM to collect and analyze logs from corporate and production systems
- Write and deploy detection rules and alerts to identify malicious behavior
- Design canary tokens and early warning mechanisms for threat detection
- Investigate security incidents including malware analysis and timeline reconstruction
- Partner with IT to enforce security standards on employee device fleets
- Drive implementation of Zero-Trust VPN and corporate security infrastructure
- Provide security guidance to non-engineering functions across the organization
What you'll need
- Available for coordination hours Monday to Friday 9am-3pm Pacific Time
- Five or more years in security engineering or detection engineering
- Hands-on experience building or maintaining SIEM infrastructure
- Experience with endpoint security tools such as CrowdStrike or similar EDR
- Strong Python skills with a track record of shipping production code
- Experience conducting incident investigations and threat modeling
- Knowledge of corporate security controls and identity management
Nice to have
- Experience with Elastic, Splunk, or other SIEM/SOAR options
- Familiarity with identity platforms like Okta
- Understanding of OAuth, Yubikey, and Passkey authentication
- Experience with Zero-Trust network architecture or VPNs
- Use of AI coding tools to automate security workflows
- Background in small security teams or startup environments
- Familiarity with AWS and cloud-native security tooling
Stack
- Python
- SIEM
- CrowdStrike
- Elastic
- Splunk
- Okta
- AWS
- Zero-Trust VPN
How you'll work
- Fully remote within the United States or Canada
- Coordination hours required Monday to Friday 9am-3pm PT
- Remote work reimbursement provided
What you get
- Medical, dental, and vision coverage
- Equity refreshers and flexible equity program
- Paid time off
- Employee assistance programs
- Country-specific benefit variations apply