Senior Security Engineer,Detection & Incident Response

Start free →

Or apply yourself on the official page →

About the role

Everpure (NYSE: P) has evolved from storage pioneer to data platform, closing fiscal 2026 with $3.7 billion in revenue, its first billion-dollar quarter, and accelerating growth into FY27. Our strategic agenda spans the companies defining the next era of technology - hyperscalers, AI labs, the AI hardware supply chain, data platform providers, and the broader AI ecosystem. This type of work—work that changes the world—is what the tech industry was founded on. So, if you're ready to seize the endless opportunities and leave your mark, come join us. THE ROLE Everpure is seeking a hands-on Senior Security Engineer to drive security operations from our Prague, Czech Republic location. In this role, you will contribute to operational excellence across incident response, threat hunting, threat intelligence integration, detection engineering, and security automation, bringing real-time visibility and rapid response to our 24/7 global security operations environment. This is a technical delivery and execution role , not a traditional monitoring position. You will work closely with detection engineers, threat intelligence analysts, incident response leadership, and our global Security Operations teams to build and refine detections, improve signal quality, execute threat hunts, automate workflows, and respond to complex security incidents with speed and precision. Success in this role is measured not by alert volume, but by signal quality, real threat detection, incident containment speed, automation maturity, and the effectiveness of response workflows . WHAT YOU'LL DO • Detection Engineering: Design, implement, and maintain detections in Splunk and related security platforms. Develop detection-as-code content using formats such as YAML/JSON, incorporate unit and regression testing, map coverage to MITRE ATT&CK, and contribute to Sigma/YARA-L coverage expansion. • Incident Response & Triage: Investigate suspicious activity and participate in incident triage, scoping, containment, eradication, recovery, and post-incident reviews. Use lessons from investigations to continuously improve detection and response processes. • Threat Hunting: Execute hypothesis-driven threat hunts using MITRE ATT&CK, the Diamond Model, kill chains, threat intelligence, behavioral baselines, and anomaly detection. Correlate signals across endpoint, cloud, identity, SaaS, network, and other security telemetry to identify real threats and operational blind spots. • Detection Quality: Continuously tune detections to improve true-positive rates and reduce alert fatigue. Identify which signals provide meaningful security value and refine detection logic based on investigation outcomes and changes in the threat landscape. • Threat Intelligence Integration: Operationalize cyber threat intelligence (CTI) by mapping adversary tools, techniques, TTPs, and indicators to the Everpure environment and translating relevant intelligence into detection and hunting strategies. • Automation & Orchestration: Build Python scripts, API integrations, enrichment workflows, and SOAR automation using platforms such as Tines, XSOAR, or equivalent. Develop workflows that reduce manual effort and accelerate investigation and containment while maintaining appropriate guardrails and logging. • Cloud & Container Security Monitoring: Monitor and investigate security signals across AWS, GCP, and Azure, including CloudTrail, GuardDuty, and cloud audit logs. Identify container and Kubernetes runtime anomalies and contribute to monitoring cloud-native attack surfaces. • Agentic & AI-Assisted Workflows: Evaluate and implement AI-assisted security workflows, including LLM-based investigation and autonomous triage capabilities. Assess AI-generated detection logic while maintaining appropri

View the official posting →