WHOOP
Technology
SecurityDetectionEngineer
Neural analysis suggests this role is
optimal for Mid+ candidates.
“Security Detection Engineer at WHOOP. Skills: Detection engineering, Threat detection, Security operations, Cloud security. Design high-signal detections. Build high-signal detections”
What You'll Achieve.
Protect member data; Ensure depth of coverage; Ensure signal precision; Ensure resilience; Reduce false positives; Improve detection health; Reduce operational overhead; Improve coverage as environment scales; Reduce noise; Enhance triage workflows; Enhance investigation workflows
Industry & Context.
Root cause analysis; Reducing noise; Increasing signal fidelity
On-call rotation
What They're Looking For.
Must Have
4+ years Information Security, Detection engineering experience, Threat detection experience, Security operations experience, Writing detection logic, Tuning detection logic, Cloud telemetry analysis, SaaS telemetry analysis, Authentication events analysis, API activity analysis, System logs analysis, Python scripting skills, Go scripting skills, PowerShell scripting skills, Fast-paced environment, Analytical mindset, Systems-thinking approach, Incident response support, On-call rotations experience
Nice to Have
Experience building detective controls, Detecting authentication abuse at scale, Detecting API abuse at scale, Applying data analysis techniques, Applying machine learning techniques, Bachelor's degree, Relevant security certifications
What You'll Do.
Design high-signal detections
Build high-signal detections
Scale high-signal detections
Develop detection logic
Maintain detection logic
Translate threat intelligence
Validate detection effectiveness
Build behavioral detections
Improve detection quality
Reduce false positives
Implement automated enrichment
Implement automated triage
Define detection KPIs
Implement measurement processes
Improve detection health
Support incident investigations
Lead incident investigations
Contribute to on-call rotation
Reduce operational overhead
Partner with Engineering
Partner with Infrastructure
Ensure monitoring coverage
Ensure detection coverage
Map detections to threat models
Identify visibility gaps
Explore advanced analytics
Apply advanced analytics
Improve detection fidelity
Reduce detection noise
Enhance triage workflows
Enhance investigation workflows
Research emerging attacks
Incorporate learnings into strategy
How You'll Work.
Team & Collaboration
Partner with Engineering; Partner with IT; Partner with Infrastructure; Partner with Product; Partner with GRC; Collaborate with engineers; Collaborate with stakeholders
Communication Scope
Explain detection strategy
Full Job Description
At WHOOP, we’re on a mission to unlock human performance. WHOOP empowers members to perform at a higher level through a deeper understanding of their bodies and daily lives. WHOOP is seeking a Security Detection Engineer to serve as a key technical contributor within our Information Security team, reporting to the Information Security Manager. In this role, you will drive the design and evolution of high-fidelity, scalable detection capabilities that protect millions of members’ biometric and health data. You will help define our detection engineering strategy across cloud, identity, endpoint, and application environments, ensuring depth of coverage, signal precision, and resilience against modern attacker tradecraft. This is an opportunity to shape a growing detection program within a rapidly evolving Information Security team. RESPONSIBILITIES: - As a member of the team, you will: - Design, build, and scale high-signal detections across cloud, identity, endpoint, network, and application layers using Detection-as-Code principles. - Develop and maintain detection logic aligned to real-world attacker behavior and frameworks such as MITRE ATT&CK across modern security platforms. - Translate threat intelligence into actionable detections and validate effectiveness through adversary emulation and testing. - Build behavioral detections to protect against threats such as account takeover, credential abuse, API misuse, automation attacks, privilege escalation, and data exfiltration. - Continuously improve detection quality by tuning alerts, reducing false positives, and implementing automated enrichment and triage. - Define and track detection KPIs (e.g., precision, recall, false positive rate, MTTD) and implement processes to measure and improve detection health. - Support and lead incident investigations, including containment, root cause analysis, and post-incident detection improvements. - Contribute to the on-call rotation while proactively reducing operational overh
Applying for this Security Detection Engineer role?
Most applicants get filtered before a human reads their resume. See if yours makes the cut.
How to Apply on Ashby
- Ashby is a fast modern ATS — most applications take under 3 minutes.
- The resume parser is strong; verify parsed experience dates and job titles.
- Custom screening questions are often scored algorithmically — answer completely.
- Location field affects geo-based screening; use your actual metro area.
ANONYMOUS · UNFILTERED
What do employees actually say about WHOOP?
Real rants from real employees. Read before you apply.