{"schemaVersion":"jobsearcher.job.v1","id":"2b77f9bd2f864bd2ba3ce30c","url":"https://jobsearcher.com/jobs/2b77f9bd2f864bd2ba3ce30c","canonicalUrl":"https://jobsearcher.com/jobs/2b77f9bd2f864bd2ba3ce30c","title":"Detection Engineer","description":"Senior Security Platform EngineerDocusign Security Operations, comprising Threat Intel, Detection Engineering, and CSIRT, identifies and mitigates threats through detection building, alert analysis, and forensic investigations. We are proactive intent-driven problem-solvers dedicated to securing the business. At Docusign, we prioritize trust, safeguarding customer data, and platform integrity. Our dynamic and global team innovates at speed with cutting-edge tech, fostering continuous improvement and proactive defense against evolving threats.Detection Engineering owns the security data platform that powers our detection operations, enabling the identification of threats and delivering actionable alerts to our CSIRT for effective response.Docusign is seeking a skilled and motivated Senior Security Platform Engineer to join our Detection Engineering team. Reporting to the Manager of Detection Engineering, you will play a central role in building and operating the security data pipeline that underpins our detection and response capabilities. This role is focused on onboarding log sources to our SIEM, designing and building security data pipelines, and ensuring the reliability and quality of the telemetry that we collect.You will own cloud infrastructure through Terraform across multiple Azure tenants, build and maintain CI/CD pipelines in Azure DevOps, and develop automated security operations workflows. We are looking for someone with the engineering depth to ensure the right data arrives in the right place, in the right shape, on time. This role requires a strong technical foundation in data engineering or DevOps, an SRE-minded approach to reliability, the ability to be on-call, and a passion for building and maintaining the critical infrastructure that powers our detection efforts.We strongly encourage applications from software engineers, data engineers, and site reliability engineers who have security experience or a demonstrated interest in security. If you've built reliable data pipelines, written production automation, or managed cloud infrastructure and you're motivated by the problem of keeping an organization's security telemetry complete, fresh, and trustworthy this role is for you.This position is an individual contributor role reporting to the Sr. Manager, Threat Detection Engineering.Responsibilities include:Onboard and integrate log sources into our SIEM and work with platform and data owners to identify, scope, and operationalize new telemetry — from initial source discovery through parsing, normalization, and validation in productionDesign and implement security data pipelinesArchitect end-to-end flows for collecting, transforming, enriching, and routing security telemetry at scale and make decisions about pipeline topology, buffering, backpressure, and delivery guaranteesTransform and enrich data in-flight, using data engine tooling to filter noise, normalize schemas, enrich events with contextual data (asset metadata, threat intel, identity), and route logs to their correct destination — whether that's the SIEM or a data lakeOwn infrastructure-as-code and CI/CD and manage cloud resources via Terraform across multiple Azure AD tenants and subscriptionsBuild and maintain CI/CD pipelines that deploy infrastructure changes, pipeline configurations, and data onboarding through version-controlled git workflows with code review, automated testing, and repeatable deploymentsBuild automation and tooling and develop software (Python primarily) to automate repetitive security operations workflows — log source onboarding, health checks, data validation, alerting integrations, and operational runbooksImplement pipeline reliability and observability and design and maintain monitoring that alerts on logging disruptions, ingestion latency, volume anomalies, parsing failures, and data quality degradationEstablish SLOs for data freshness, completeness, and correctness, ensuring the team knows when data stops flowing before the adversary takes advantage of itSupport Detection Engineers by ensuring the data platform delivers the telemetry their detections require, in the schema they expect, with the freshness guarantees their detection logic depends onContribute to operational excellence, document pipeline architecture, runbooks, and onboarding processes, and participate in on-call rotation for data platform issuesClearly and concisely communicate technical security concepts, findings, and recommendations to both technical and non-technical stakeholders","company":"DocuSign","rawCompany":"docusign","city":"Millbrae","state":"CA","isRemote":false,"isActive":true,"createdAt":"2026-10-16T12:53:26.939Z","occupations":[{"code":"15-1299.05","title":"Information Security Engineers","slug":"information-security-engineers"},{"code":"15-1299.08","title":"Computer Systems Engineers/Architects","slug":"computer-systems-engineers-architects"},{"code":"15-1212.00","title":"Information Security Analysts","slug":"information-security-analysts"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"513210","title":"Software Publishers","slug":"software-publishers"},{"code":"541511","title":"Custom Computer Programming Services","slug":"custom-computer-programming-services"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"Detection Engineer","description":"Senior Security Platform EngineerDocusign Security Operations, comprising Threat Intel, Detection Engineering, and CSIRT, identifies and mitigates threats through detection building, alert analysis, and forensic investigations. We are proactive intent-driven problem-solvers dedicated to securing the business. At Docusign, we prioritize trust, safeguarding customer data, and platform integrity. Our dynamic and global team innovates at speed with cutting-edge tech, fostering continuous improvement and proactive defense against evolving threats.Detection Engineering owns the security data platform that powers our detection operations, enabling the identification of threats and delivering actionable alerts to our CSIRT for effective response.Docusign is seeking a skilled and motivated Senior Security Platform Engineer to join our Detection Engineering team. Reporting to the Manager of Detection Engineering, you will play a central role in building and operating the security data pipeline that underpins our detection and response capabilities. This role is focused on onboarding log sources to our SIEM, designing and building security data pipelines, and ensuring the reliability and quality of the telemetry that we collect.You will own cloud infrastructure through Terraform across multiple Azure tenants, build and maintain CI/CD pipelines in Azure DevOps, and develop automated security operations workflows. We are looking for someone with the engineering depth to ensure the right data arrives in the right place, in the right shape, on time. This role requires a strong technical foundation in data engineering or DevOps, an SRE-minded approach to reliability, the ability to be on-call, and a passion for building and maintaining the critical infrastructure that powers our detection efforts.We strongly encourage applications from software engineers, data engineers, and site reliability engineers who have security experience or a demonstrated interest in security. If you've built reliable data pipelines, written production automation, or managed cloud infrastructure and you're motivated by the problem of keeping an organization's security telemetry complete, fresh, and trustworthy this role is for you.This position is an individual contributor role reporting to the Sr. Manager, Threat Detection Engineering.Responsibilities include:Onboard and integrate log sources into our SIEM and work with platform and data owners to identify, scope, and operationalize new telemetry — from initial source discovery through parsing, normalization, and validation in productionDesign and implement security data pipelinesArchitect end-to-end flows for collecting, transforming, enriching, and routing security telemetry at scale and make decisions about pipeline topology, buffering, backpressure, and delivery guaranteesTransform and enrich data in-flight, using data engine tooling to filter noise, normalize schemas, enrich events with contextual data (asset metadata, threat intel, identity), and route logs to their correct destination — whether that's the SIEM or a data lakeOwn infrastructure-as-code and CI/CD and manage cloud resources via Terraform across multiple Azure AD tenants and subscriptionsBuild and maintain CI/CD pipelines that deploy infrastructure changes, pipeline configurations, and data onboarding through version-controlled git workflows with code review, automated testing, and repeatable deploymentsBuild automation and tooling and develop software (Python primarily) to automate repetitive security operations workflows — log source onboarding, health checks, data validation, alerting integrations, and operational runbooksImplement pipeline reliability and observability and design and maintain monitoring that alerts on logging disruptions, ingestion latency, volume anomalies, parsing failures, and data quality degradationEstablish SLOs for data freshness, completeness, and correctness, ensuring the team knows when data stops flowing before the adversary takes advantage of itSupport Detection Engineers by ensuring the data platform delivers the telemetry their detections require, in the schema they expect, with the freshness guarantees their detection logic depends onContribute to operational excellence, document pipeline architecture, runbooks, and onboarding processes, and participate in on-call rotation for data platform issuesClearly and concisely communicate technical security concepts, findings, and recommendations to both technical and non-technical stakeholders","datePosted":"2026-10-16T12:53:26.939Z","dateModified":"2026-10-16T12:53:26.939Z","hiringOrganization":{"@type":"Organization","name":"DocuSign","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Millbrae","addressRegion":"CA","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"2b77f9bd2f864bd2ba3ce30c"},"url":"https://jobsearcher.com/jobs/2b77f9bd2f864bd2ba3ce30c"}}