Threat Detection & Response Engineer III

Qualifications 3+ years of experience in cybersecurity, with at least 2 years focused on security operations, detection engineering, incident response, or threat hunting Experience in building or tuning security detections Familiarity with risk-based alerting and alert tuning, including strategies to reduce noise, improve detection fidelity, and prioritize high-signal alerts Familiarity with EDR platforms, including basic alert triage and response actions Working knowledge of Windows, MacOS, or Linux endpoint security and common attack techniques Familiarity with SIEM platforms and log analysis (e.g., Splunk, Elastic, or similar) Basic understanding of common attack vectors, TTPs, and security frameworks such as MITRE ATT&CK and the Cyber Kill Chain Experience with scripting (Python, PowerShell, or Bash) for automation or analysis tasks Clear verbal and written communication skills Preferred

Qualifications An ideal candidate will also have: Active TS/SCI security clearance or ability to obtain and maintain a security clearance Knowledge of digital forensics and malware analysis techniques Experience building or significantly maturing a detection and response program Experience working in Azure Government Cloud (Azure GovCloud) environments Experience with cloud security monitoring in AWS, GCP, or Azure commercial environments Familiarity with CMMC, FedRAMP, NIST 800-53, or other federal compliance frameworks Experience with Detections-as-Code paradigms, GitOps, CI/CD, etc Experience participating in or supporting red team/purple team exercises Work Environment This role will be onsite in our Denver (Centennial), CO office or our Long Beach, CA office This role operates in a fast-paced, high-stakes environment where rapid decision-making and adaptability are essential On-call rotation participation, including after-hours participation, is required for incident response coverage Must be comfortable working under pressure during active security incidents High degree of autonomy and ownership Direct access to leadership and opportunity to influence security strategy

Compensation Base Salary: $115,000 to $165,000 Equity +

Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, location, and experience. What We Offer Competitive salary Opportunity to work on challenging, mission-critical security initiatives Professional development and certification support Collaborative culture with experienced security professionals This position will be open until it is successfully filled. To submit your application, please follow the directions below. To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State. True Anomaly is committed to equal employment opportunity on any basis protected by applicable state and federal laws. If you have a disability or additional need that requires accommodation, please do not hesitate to let us. To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State. True Anomaly is committed to equal employment opportunity on any basis protected by applicable state and federal laws. If you have a disability or additional need that requires accommodation, please do not hesitate to let us.

A meeting lands on your calendar

If they’re a yes, I book the chat. You show up — that’s the whole job-hunt.