Senior Threat Detection Engineer - Intelligence - Austin | Miro Careers Our Story People How we hire Teams Engineering team Design team Product team Customer experience team Locations Life at Miro Open positions Menu Our Story People How we hire Teams Engineering team Design team Product team Customer experience team Locations Life at Miro Open positions Home Open positions Vacancy Senior Threat Detection Engineer - Intelligence Department: Engineering Locations: Austin Job Requisition ID: JR001119 Apply now We’re looking for a Senior Threat Detection & Intelligence Engineer to help us understand how adversaries operate, detect meaningful threats early, and lead investigations when it matters most. This role sits at the intersection of threat intelligence, detection engineering, and incident investigation with an engineering-first mindset. If you enjoy turning messy signals into clear attacker narratives, this role is for you.
About
the Team The Cloud Security & Detection & Response (CSDR) team protects Miro by staying ahead of credible threats. We focus on: Translating external threat intelligence into actionable detections Building custom, high-fidelity detections for cloud and SaaS environments Leading complex investigations and incident response Partnering with engineering to drive security by design We care about context, signal quality, and attacker intent not alert volume. What You’ll Do Track emerging threats, attacker techniques, and campaigns relevant to cloud and SaaS Turn threat intelligence into practical detection strategies and attack hypotheses Design and maintain context-aware detections across cloud, identity, and application layers Lead deep investigations, from first signal to root cause and remediation Act as a technical lead during security incidents, guiding response and decision-making Analyze detection and investigation trends to improve preventative controls Partner with engineering teams to raise security maturity across the organization Who This Role Is For This role is a great fit if you: Think in attacker TTPs, not just alerts or dashboards Enjoy investigating ambiguous signals and turning them into clear conclusions Have experience in threat intelligence, threat hunting, or security investigations Care about why something is happening, not just what fired Want to build detection programs that evolve with the threat landscape Are comfortable explaining technical risk in business terms This role is not a fit if you’re mainly focused on compliance, policy writing, or managing vendors. What We’re Looking For 5–7 years in security , with 2+ years in threat detection, threat intelligence, or investigations Experience in cloud-native SaaS environments (AWS strongly preferred) Strong investigation skills and ability to analyze attacker behavior Experience using threat intelligence to inform detection and response Proficiency in Python and comfort automating security workflows Experience querying large datasets (SQL or similar) Familiarity with cloud security telemetry, logging, and detection platforms Solid understanding of incident response and digital forensics Experience with Infrastructure as Code (Terraform or similar) Why You’ll Love This Role You’ll help define how threat intelligence is used, not just consume it You’ll work on real attacker behavior, not checkbox security You’ll have room to build, experiment, and improve detection capabilities You’ll partner closely with engineers who value security as an engineering problem What's in it for you We want you to feel supported, connected, and ready to grow. Our global
benefits package generally includes equity, a wellbeing benefit, a WFH equipment allowance, and an annual Learning & Development stipend. Join a diverse team where you can do your best work. Full
benefits may differ per location. If you would like to learn more about location-specific
benefits, please refer to our Global Miro
benefits board . Recruiter: #LI-MH1 About Miro Miro is a visual workspace for innovation that enables distributed teams of any size to build the next big thing. The platform's infinite canvas enables teams to lead engaging workshops and meetings, design products, brainstorm ideas, and more. Miro, co-headquartered in San Francisco and Amsterdam, serves more than 100M users and 250,000 companies collaborate in the Innovation Workspace. Miro was founded in 2011 and currently has more than 1,600 employees in 13 hubs around the world. We are a team of dreamers. We look for individuals who dream big, work hard, and above all stay humble. Collaboration is at the heart of what we do and through our work together we hope to create a supportive, welcoming, and innovative environment. We strive to play as a team to win the world and create a better version of ourselves every day. If this sounds like something that excites you, we want to hear from you! Check out more about life at Miro: Youtube: https://www.youtube.com/@lifeatmiro Blog: https://miro.com/careers/life-at-miro/all/ Instagram: https://www.instagram.com/mirohq/ At Miro, we strive to create and foster an environment of belonging and collaboration across cultural differences. Miro’s mission — Empower teams to create the next big thing — is how we think about our product, people, and culture. We believe that creating big things requires diverse and inclusive teams. Diversity invites all talent with different demography, identities and styles to step in , and inclusion invites them to step closer together. Every day, we are working to build a more diverse Miro, cultivate a sense of belonging for future and current Mironeers around the world, and foster an environment where everyone can collaborate and embrace differences. Miro handles and uses personal data of job applicants in line with its Recruitment Privacy Policy found here . Apply for Senior Threat Detection Engineer - Intelligence First Name * Last Name * Email * Valid email format: [email protected] Phone Valid phone number format: +31636363634 Resume/CV * Attach File types: pdf, doc, docx, txt, rtf File size: max 2MB Cover Letter Attach File types: pdf, doc, docx, txt, rtf File size: max 2MB LinkedIn Profile * Will you now or in the future require visa sponsorship for employment with Miro? * Please select... Yes No This position is based in Austin, would you be able to work from this location? * This role supports FedRAMP-related
responsibilities, which require U.S. citizenship under federal regulations. Do you confirm that you are a U.S. citizen? * Please select... Yes No By submitting my application I agree that my data is being stored and processed. _JobID Global Demographic Questionnaire At Miro, we're committed to building a diverse and inclusive workplace where everyone can thrive. Your unique perspectives empower us to innovate and drive positive change. While we're eager to learn more about the rich diversity of our candidates, your privacy is paramount. Participation in this questionnaire is completely optional, and any information you provide will be de-identified and analyzed in aggregate form, ensuring it cannot be used to identify you personally. The insights gained will directly contribute to our broader inclusion strategy, helping us to identify opportunities for enhancing representation and fostering an environment where all talent can succeed. Rest assured, your responses will not influence your application and will be kept strictly confidential. By choosing to share your demographic information, you're helping us move towards a more inclusive future. If you consent to participate: When were you born? * Please select... Between 1955 - 1964 (Baby Boom) Between 1965 - 1980 (Gen X) Between 1981 - 1996 (Millennial) Between 1997 - 2012 (Gen Z) After 2012 (Gen Alpha) I don't wish to answer Which of the following best describes your gender identity? * Please select... Male Female Non-binary I don't wish to answer Do you identify as a member of the LGBTQ+ community? * Please select... Yes No I don't wish to answer Do you identify as future member of any of the following Employee Resource Groups (ERGs)? * Asians at Mir o Black Excellence Somos (Hispanic or Latino) None of the above I don't wish to answer I acknowledge that my participation is voluntary and understand that my demographic information will be used exclusively for the purpose of monitoring and reporting to support Miro's inclusion initiatives. This data will be de-identified, stored separately from my application, and handled with the utmost confidentiality. Please note, if you continue in the interview process or are hired and wish to disclose any demographic information for which you would need to be accommodated, you will need to make this disclosure again separately, as the information provided here will not be linked to your identity. Next Prepare yourself to go beyond Here are some helpful tips to ensure you have all the correct information throughout our hiring process. How we hire 01. Recruiter Screen A 30-min interview to discuss your relevant skills, perspective on resilience, experience, and what motivates you to join Miro. 02. Hiring Manager The hiring manager will meet to discuss your experience and fit for
the role by assessing whether you align with the Miro Mindset (Curiosity, Drive, Resilience, Empathy, Cognitive Agility & Accountability). This interview usually takes 90-120 minutes. 03. Skill Assesment An interactive presentation to see your skills in action, based around a particular case study or business problem. 04. Meet
the Team Here you will meet cross-functional stakeholders, and we will ask evidence-based questions to evaluate how well you align with
Reforge is evolving to empower product teams beyond education. Alongside expert training, we now offer AI-powered tools designed to help teams ship high-quality software faster. With two innovative tools already launched and more on the way, we combine cutting-edge software with the earned insights of the world’s top practitioners. Join us as we shape the future of product management!
