Senior Security Engineer

The Senior Security Engineer (Toolsmith) will design and scale Miradero's security platform, overseeing the multi-tenant telemetry pipeline, detection logic, an AI-enabled layer, and integrations with CrowdStrike and ArmorPoint. This remote role is based in California and offers a salary range of USD 100,000 to 150,000 per year.

Responsibilities

• Platform Engineering: Architect and implement the multi-tenant telemetry pipeline and apply Detection-as-Code practices using GitHub or GitLab for version control and CI/CD deployment of detection logic.
• Tooling Orchestration: Manage the configuration and integration of CrowdStrike Falcon (EDR) and ArmorPoint (XDR/SIEM) to ensure high-signal telemetry flows from endpoints to analysts.
• Python Development: Create production-grade Python scripts to automate SOC workflows, build custom API integrations between the security stack and PSA/documentation tools, and develop internal tooling.
• AI Implementation: Co-lead the development of a private AI layer, including building retrieval-augmented generation pipelines and deploying LLM-based classifiers to automate triage and summary generation.
• Detection Authoring: Serve as the senior authority on detection content across CrowdStrike (CQL/LogScale) and ArmorPoint, tuning rules to minimize false positives.
• Technical Pre-Sales: Act as the technical authority in standard client engagements, scoping technical requirements for pilots and ensuring architectural soundness.
• Escalation Engineering: Provide final technical analysis for complex root-cause investigations that exceed routine SOC playbooks.

Requirements

• 7+ years in Security Engineering, Detection Engineering, or Platform Architecture.
• Coding Proficiency: strong Python skills for automation and API integration.
• DevOps Mindset: fluency with GitHub or GitLab, CI/CD practices, and treating infrastructure and detections as code.
• Tooling Expertise: deep hands-on experience with CrowdStrike Falcon and ArmorPoint (or equivalent enterprise EDR/XDR platforms).
• Infrastructure Knowledge: solid understanding of cloud telemetry (AWS, Azure, GCP) and identity frameworks (Entra ID/Okta).
• Security Frameworks: MITRE ATT&CK fluency with experience translating tactics into actionable detection logic.

Technologies

• Python
• GitHub
• GitLab
• CrowdStrike Falcon
• ArmorPoint
• AWS
• Azure
• GCP
• Entra ID/Okta
• MITRE ATT&CK
• CQL
• LogScale
• RAG (Retrieval-Augmented Generation)
• LLM

Benefits

• Dental insurance
• Health insurance
• Paid time off
• Vision insurance

The Right Personality

• Builder mentality: prefer constructing a tool that solves a problem over repeated manual fixes.
• Low ego, high output: comfortable working under mentorship from a CTO and as a peer to the SOC Manager.
• Precision-driven: prioritizes documentation and architectural clarity over quick fixes.

Why Miradero Cybersecurity

• Founding influence: you will be the first engineering hire, shaping the company's technical trajectory.
• The AI moat: lead the implementation of a private, local AI stack to create a distinctive technical advantage over legacy MSSPs.
• Equity and growth: eligible for employee equity options in a lean, well-funded startup with a clear path to technical leadership.
• Operational autonomy: a high-trust, low-micromanagement environment.