> Markdown version of [/jobs/ext/164911-detection-corpsec-engineer-remote](https://www.wearedevelopers.com/jobs/ext/164911-detection-corpsec-engineer-remote). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Detection & CorpSec Engineer (Remote) - **Company:** Quora, Inc. - **Location:** United States (Remote available) - **Experience:** Expert - **Salary:** $172,279.0 - $255,347.0 - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Amazon Web Services, Cloud Computing Security, Identity and Access Management, Intrusion Detection and Prevention, Virtual Private Networks (VPN), Python (Programming Language), Network Architecture, OAuth, Zero Trust Network Access, Security Information and Event Management, Software Engineering, Okta, Malware, Production Code, Splunk - **Published:** May 19, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=24859ee575c3067a ## About the Role Do you have experience in Threat detection & response?, * Availability for meetings and impromptu communication during Quora's "coordination hours" (Mon-Fri: 9am-3pm Pacific Time) * 5+ years of experience in security engineering, detection engineering, or a closely related field * Hands-on experience building or maintaining SIEM infrastructure and writing detection rules * Experience with endpoint security tools (e.g. CrowdStrike or similar EDR platforms) * Strong Python engineering skills with a track record of writing production code reviewed and shipped alongside software engineering teams * Experience conducting security incident investigations, including malware analysis, log review, and timeline reconstruction and threat modeling * Experience with corporate security controls, identity management, endpoint protection, and access control enforcement Preferred Requirements: * Experience with SIEM/SOAR options such as Elastic/Splunk or alternatives * Familiarity with identity platforms such as Okta * Strong understanding of authentication technology such as OAuth, Yubikey and Passkey * Experience with Zero-Trust network architecture or VPN implementation * Demonstrated use of AI coding tools to build or automate security workflows * Experience in a small security team or fast-paced startup environment * Familiarity with AWS and cloud-native security tooling ## Description Quora's Security team is responsible for protecting the company's most critical assets from both external threats and insider risks. We're a small, high-ownership team with a pragmatic, builder-oriented approach: we build where commercial solutions don't fit, leverage AI to work efficiently at scale, and move fast to stay ahead of real-world threats. We're looking for a Detection & Corporate Security Engineer to strengthen both our preventative and detection capabilities across corporate and production environments. This is a genuinely hybrid role: you'll build and maintain detection systems while also owning the corporate security controls that protect our employee fleet and internal infrastructure. You'll work closely with our IT team, collaborate with existing security engineers on production-side coverage, and serve as a trusted security advisor to non-technical teams across the organization., * Build and maintain a SIEM to collect and analyze logs from across corporate and production systems; write and deploy detections and alerts to identify malicious behavior * Design and deploy canary tokens and early warning mechanisms to detect threats before they reach critical assets * Investigate security incidents end-to-end - including malware analysis, exfiltration assessment, and timeline reconstruction - and build runbooks to scale response capabilities * Partner with IT to define and enforce security standards across the employee device fleet, including endpoint protection, managed device requirements, OS compliance, and VPN access controls * Drive the PoC and implementation of Zero-Trust VPN and other corporate security infrastructure * Provide security guidance and advisory support to non-engineering functions across the organization ## Related Videos - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [Advanced Cypress: custom assertions and tasks](https://www.wearedevelopers.com/videos/790-advanced-cypress-custom-assertions-and-tasks) ## Related Articles - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [Dev Digest 137 - AI'm not sure about this](https://www.wearedevelopers.com/magazine/485-dev-digest-137-ai-m-not-sure-about-this) - [Find a Developer Job: 12 Best Job Sites For Developers](https://www.wearedevelopers.com/magazine/165-find-a-developer-job-12-best-job-sites-for-developers)