Skip to content
Aurora Innovation

Staff Security Engineer, Cloud Detection & Response

Mountain View, CA; Livonia, MI; San Francisco, CA; Pittsburgh, PA; Dallas, TX; Seattle, WAHybrid · United States
Staff · FullTime · Enterprise IT & Security
POSTED 21 OCTVERIFIED 5H AGO
Apply Ask
Pay · posted
$189k–303k
mkt median $250k
Open for
13d
since 21 Oct
PERM · FY25
17
green card filings
Hiring · 30d
92
−1 net · open roles
PythonLLMsDistributed systems

Who we are

Aurora’s mission is to deliver the benefits of self-driving technology safely, quickly, and broadly.

The Aurora Driver will create a new era in mobility and logistics, one that will bring a safer, more efficient, and more accessible future to everyone.

At Aurora, you will tackle massively complex problems alongside other passionate, intelligent individuals, growing as an expert while expanding your knowledge. For the latest news from Aurora, visit aurora.tech or follow us on LinkedIn.

What we are looking for

We're searching for a Staff Cybersecurity Engineer to help mature Cloud & Enterprise Detection within our Detection & Response (D&R) team, under the Technical Assurance division. This is a senior individual contributor role focused on driving cross-functional projects that strengthen Aurora's detection infrastructure and expand detection coverage across our cloud infrastructure, enterprise environments. You will scope and lead multi-quarter initiatives that raise the maturity of our detection program and powering detection at scale, executing through your own hands-on work and through close partnership with Cloud Infrastructure, IT, and Platform Engineering teams.

In this role you will

Drive cross-functional projects to mature Aurora's detection infrastructure, log ingestion and normalization, detection-as-code pipelines with testing, versioning, and CI/CD for detection content, and scalable, cost-aware telemetry collection

Expand detection coverage across cloud and corporate environments and prioritize coverage improvements

Design, build, and tune detections for cloud control plane and workload activity, identity-based attacks, endpoint, SaaS threats, abuse of CI/CD and service-to-service communication paths

Partner with Cloud Infrastructure, IT, and Platform Engineering to embed logging and detection requirements into system design, and represent D&R in cross-functional working groups and design reviews

Integrate threat intelligence and adversary emulation into detection coverage priorities, and conduct proactive threat hunting across cloud, identity, endpoint, and SaaS data

Respond to cloud and enterprise security incidents and participate in an on-call rotation, feeding lessons learned back into detection coverage and infrastructure improvements

Collaborate with and mentor SOC engineers on cloud and enterprise detection practices, and contribute to quarterly planning for detection infrastructure and coverage initiatives

Required qualifications

10+ years of security experience; demonstrated experience leading cross-functional security projects or programs from scoping through delivery

Strong technical foundation in threat detection, incident response

Expertise with cloud security across one or more major providers, including cloud-native telemetry and detection sources

Experience building or maturing detection infrastructure - SIEM or security data lake pipelines, log onboarding and normalization, detection-as-code workflows

Expertise with endpoint detection and response (EDR) and SaaS security monitoring, or comparable host and application telemetry depth

Expertise authoring and maintaining detections (anomalous, network, host, identity, or cloud activity) and measuring detection coverage against adversary behavior

Experience with incident management, driving cross-departmental collaboration for containment and remediation

Expertise with MITRE ATT&CK framework and modern adversarial techniques; understanding of NIST CSF

Ability to write quality, testable code in Python

Desirable qualifications

Experience designing and implementing Zero Trust Architecture

Experience scaling SOC, Detection Engineering with AI/LLM

Experience building and architecting data lakes

Experience with compliance frameworks (SOC 2, ISO 27001)

For roles based in Mountain View: The salary range for this position is $189,000 - $303,000 per year.

For roles based in Pittsburgh, PA,: The salary range for this position is $171,000 - $273,000 per year.

Aurora’s pay ranges are determined by role, level, and location. Within the range, the successful candidate’s starting base pay will be determined based on factors including job-related skills, experience, qualifications, relevant education or training, and market conditions. These ranges may be modified in the future. The successful candidate will also be eligible for an annual bonus, equity compensation, and benefits.

Source · Aurora InnovationFirst seen 2 NovOriginal ↗