Staff Information Security Engineer - Detection Engineering at LinkedIn3

Department: EngineeringSeniority in posting: senior

Compensation

$156,000 – $255,000/yr

Setup: Remote
Location: Mountain View, California
Type: Full-time
Level: staff+
Posted: Aug 28, 2026

Description

LinkedIn is hiring a Staff Security Engineer for its Detection Engineering team to define and operate detection strategy across endpoint, identity, cloud, and SaaS environments. The role focuses on detections-as-code, telemetry quality, threat hunting, adversary emulation, incident-response automation, threat-intelligence integration, detection metrics, and engineering leadership. It is remote anywhere in the United States or hybrid in LinkedIn’s Mountain View office, and offers a base salary of $156,000 to $255,000 plus potential bonus, stock, and benefits.

Required Skills

Detection Engineering
Technical Leadership
KQL/SQL
Detections-as-code
Python
SIGMA
SIEM/XDR/EDR
Threat Hunting
Adversary Emulation
SOAR/Logic Apps

Additional Information

Minimum Education: Bachelor of Arts or Bachelor of Science degree in Cybersecurity, Information Security, Computer Science, or a related technical discipline, or related practical experience
Required Previous Experiences: 5+ years of experience in security engineering, detection engineering, or incident response
2+ years of technical leadership
Experience building detections and automation with Python and KQL/SQL
Experience building detections-as-code at large scale
Experience with attacker TTPs, ATT&CK, and detection efficacy metrics
Experience designing schemas, data models, and telemetry pipelines
Experience with SIGMA rule authoring, translation, and adversary emulation
Preferred Qualifications: BS with 8+ years, MS with 7+ years, or PhD with 4+ years of relevant work experience
8+ years of detection engineering experience with 3+ years in technical leadership
Rigorous detection-quality measurement approach
Experience operating detections over billions of events per day and multi-region data pipelines
Building detection testing harnesses, synthetic signal, and adversary emulation at scale
Familiarity with identity, endpoint, and SaaS signals
Applied analytics or machine learning for anomaly detection, risk scoring, or enrichment
Experience with AI-enabled attack patterns and detection workflows
Relevant security certifications and detection-related publications or open-source contributions
Translation Company Name: LinkedIn