Senior Security Engineer (Detection & Response)

<div class="content-intro"><h1><strong>Who We Are</strong></h1> <p><span style="font-weight: 400;">At Justworks, you’ll enjoy a welcoming and casual environment, great benefits, wellness program offerings, company retreats, and the ability to interact with and learn from leaders in the startup community. We work hard and care about our most prized asset - our people.</span></p> <p><span style="font-weight: 400;">We’re helping businesses get off the ground by enabling them to focus on running their business. We solve HR issues. We’re data-driven and never stop iterating. If you’d like to work in a supportive, entrepreneurial environment, are interested in building something meaningful and having fun while doing it, we’d love to hear from you.</span></p> <p><span style="font-weight: 400;">We're united by shared goals and shared motivations at Justworks. These are best summed up in our company values, which are reflected in our product and in our team.</span></p> <p><a href="https://www.justworks.com/careers#values"><span style="font-weight: 400;">Our Values</span></a></p> <p><span style="font-weight: 400;">If this sounds like you, you’ll fit right in.</span></p></div><h1><strong>Who You Are</strong></h1> <p>Justworks is looking for an experienced security engineer skilled in detection and response, who can help enhance and mature Justworks’ Security. As a Senior Detection Engineer, you’ll design, build, and maintain the detection logic that powers our platform, conduct proactive threat hunting, and drive continuous improvements across our detection and incident handling workflows. You’ll collaborate closely with IT, Engineering, Platform, and other members of the Security team to identify attacker behaviors, build high‑fidelity detections, and strengthen our defenses.</p> <p>You’ll also play a key role in designing and conducting table‑top exercises, improving processes, and building automation that reduces friction and accelerates response. You’ll help explore how AI can enhance detection, hunting, and operational efficiency.</p> <p><strong>Your Success Profile</strong></p> <h2><strong>What You Will Work On</strong></h2> <ul> <li>Build, tune, and deploy high‑quality detections across our platform</li> <li>Develop and refine detections using telemetry from EDR, threat intel, endpoint &amp; cloud posture platforms and native AWS cloud services</li> <li>Conduct proactive threat hunting to uncover threat actor behaviors and detection gaps</li> <li>Lead security event &amp; incident handling, including triage, investigation, containment guidance, and post‑incident improvements</li> <li>Build automation and tooling to reduce manual effort and improve detection accuracy</li> <li>Drive process improvements across detection engineering, incident response, and telemetry workflows</li> <li>Collaborate with Engineering to ensure high‑quality logging and visibility across AWS environments</li> <li>Explore and prototype AI‑assisted detection and response capabilities</li> <li>Contribute to internal playbooks, documentation, and detection engineering best practices</li> <li>Design and conduct table‑top exercises to validate readiness and strengthen response processes</li> <li>Note: This position will require participation in an on-call rotation.</li> </ul> <h2><strong>How You Will Do Your Work</strong></h2> <p>As a Sr. Detection Engineer, <em>how</em> results are achieved is paramount for your success and ultimately result in our success as an organization. In this role, your foundational knowledge, skills, abilities and personal attributes are anchored in the following:</p> <ul> <li><strong>Good judgement </strong>- the exercise of critical thinking, analyzing and assessing problems and implications, identifying patterns, making connections of underlying issues, understanding risks and developing mitigation strategies, and taking ownership of the outcome.</li> <li><strong>Resourcefulness </strong>- taking a can-do approach, even in the face