Remote Detection Engineer Jobs
Remote detection engineer jobs are open across cybersecurity, financial services, healthcare, and government contracting sectors at remote-first firms and distributed security teams, from early-career threat detection roles to senior detection engineering positions. Employers hiring remotely right now include Whatnot, DoorDash, and CrowdStrike. See the openings below and apply to the ones that match your experience.
Find JobsOverview
Showing 5 of 26+ Remote Detection Engineer jobs







REI Co-op is looking for a Senior Detection Engineer. You will help protect our people, members, and systems. You will join our Security Operations team. You will build ways to find and stop cyber threats. Your work will cover devices, user access, networks, cloud tools, software services, and new AI tools.
You will write and tune alerts. You will hunt for threats and help review security events. You will use scripting and automation to make incident response faster, more efficient, and more consistent. You will work with security analysts, engineers, data teams, and business partners. Together, you will close gaps, improve data, and help teams make good choices during an event.
Responsibilities:
- Build, test, and maintain threat alerts. Use SIEM, EDR, cloud, network, SaaS, and app tools. Work with Microsoft Sentinel, Splunk, or like tools.
- Use MITRE ATT&CK, threat data, and event trends. Find gaps, cut false alerts, and improve alert quality.
- Join threat hunts and event reviews. Help contain threats, find root causes, and restore service. Turn lessons into new alerts and guides.
- Build scripts, work flows, reports, and SOAR links. Make alert review and event response fast, clear, and easy to repeat.
- Build ways to watch AI apps, copilots, agents, and AI data use. Help find data loss, stolen access, unsafe prompts, and misuse.
- Work with security, engineering, data, and business teams. Share clear updates. Take part in the on-call schedule as needed.
Qualifications
- A bachelor’s degree in computer science, information security, information technology, or a related field. An equal mix of school and work experience also meets this need.
- 5 or more years of work in security operations, detection engineering, threat hunting, incident response, or security engineering.
- Skill creating and tuning alerts in a SIEM, such as Splunk or Microsoft Sentinel. Work with EDR tools, such as Microsoft Defender, CrowdStrike, or SentinelOne.
- Skill reviewing threats across devices, user access, networks, cloud tools, or SaaS services. This includes log review and root cause work.
- Working knowledge of MITRE ATT&CK and attacker tactics, techniques, and procedures.
- Skill with at least one script language, such as Python or PowerShell. Ability to work well with both tech and business teams.
Pay Transparency
See All 26 Remote Detection Engineer Jobs
Find roles that match your experience and apply in just a few clicks.
Find JobsRemote Detection Engineer Job Market
Who's Hiring



Top Industries Hiring
- Technology & Software
What Employers Look For
The qualifications that appear most often in remote detection engineer jobs.
- Three or more years of experience writing and tuning detection rules in a SIEM platform
- Proficiency with at least one major SIEM such as Splunk, Microsoft Sentinel, Elastic, or Chronicle
- Hands-on knowledge of MITRE ATT&CK framework for mapping detections to adversary techniques
- Experience with scripting languages such as Python, PowerShell, or KQL for automation and log parsing
- Familiarity with endpoint, network, and cloud log sources including EDR, firewall, and cloud audit logs
- Security Operations Center or incident response background demonstrating alert triage and investigation skills
Tips for Your Remote Detection Engineer Job Search
Show async documentation skills upfront
Remote detection engineering teams rely on written runbooks, detection rationale docs, and async threat briefings. Include examples of detection write-ups or threat documentation in your application materials to show you can communicate findings clearly without a meeting.
Build a detection portfolio before you apply
Remote employers can't watch you work, so your GitHub or personal security blog becomes your proof of skill. Publish detection rules, SIEM queries, or threat-hunting notebooks that show your methodology and the reasoning behind each detection you've built.
Apply early to remote roles that fit
Migrate Mate lists remote detection engineer openings from across the U.S. in one place, so you can find roles that match your stack and apply directly without sorting through unrelated postings.
Prep for remote-specific technical interviews
Remote detection engineer interviews often include live detection-writing exercises shared over a screen, async take-home threat scenarios, or walk-throughs of your existing detection logic. Practice explaining your detection decisions out loud and in writing, since both formats come up.
Remote Detection Engineer Jobs: Frequently Asked Questions
How do I get a remote detection engineer job?
Remote detection engineer roles go to candidates who can demonstrate self-direction and strong written communication alongside their technical skills. Remote-first security firms and distributed SOC teams screen heavily for experience with SIEM platforms, detection-as-code practices, and the ability to document detections clearly for async review. A portfolio of custom detection rules, public threat research, or contributions to open-source security projects gives you a concrete edge over candidates with similar resumes.
Which companies hire remote detection engineers?
Employers currently hiring remote detection engineers include Whatnot, DoorDash, and CrowdStrike, per current remote listings on Migrate Mate as of November 2026. Remote openings in this role are concentrated at remote-first cybersecurity vendors, cloud-native companies, and financial services firms running distributed security operations teams.
Can you get a remote detection engineer job with no experience?
Yes, but remote entry-level detection engineer roles are harder to land because employers expect you to work independently from day one with minimal oversight. Smaller remote-first security firms and managed detection and response providers occasionally hire junior candidates who can show hands-on work: home lab detections, CTF write-ups, or documented SIEM tuning exercises. Certifications like Security+ or vendor-specific SIEM credentials help open the door.
Do you need a degree for remote detection engineer jobs?
Not always. Many remote employers weigh demonstrated detection engineering skill over formal education, particularly at remote-first firms that evaluate candidates on technical output rather than credentials. A portfolio of working detection logic, experience with tools like Splunk, Elastic, or Chronicle, and a clear ability to communicate findings in writing can carry more weight than a degree in a remote hiring process.
Which industries hire the most remote detection engineers?
The sectors hiring the most remote detection engineers are Technology & Software, based on current remote listings on Migrate Mate as of November 2026. These sectors rely heavily on distributed security teams that need detection engineers who can build, tune, and maintain detection coverage without being physically on-site.
See All 26 Remote Detection Engineer Jobs
Find roles that match your experience and apply in just a few clicks.
Find Jobs