Detection Engineer

ElevenLabs

Detection Engineer strengthening security detection and incident response at ElevenLabs, an AI research and product company. Automating monitoring across cloud, SaaS, endpoint, and SIEM environments.

Posted 8/6/2026full-timeLondon • 🇬🇧 United KingdomMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in incident response and security operations, with a strong focus on detection engineering and security monitoring across various platforms. Proficient in automating security tasks and translating threat intelligence into actionable detections.

Highest-signal resume keywords

Incident ResponseDetection EngineeringGoogle SecOps (Chronicle)Cloud Security MonitoringScripting (Python, Bash)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Incident ResponseSecurity OperationsDetection EngineeringSecurity MonitoringData OnboardingRule CreationAutomating Detection TasksThreat IntelligenceData ParsingSecurity Frameworks

Soft Skills

Analytical SkillsProblem-Solving SkillsAttention to Detail

Tools & Technologies

Google SecOps (Chronicle)JAMF MDMGoogle WorkspaceOktaGCP Security Command Center

Industry Keywords

MITRE ATT&CKNIST Cybersecurity FrameworkSaaS ApplicationsCloud Security

Tech Stack

Tools & technologies

CloudCyber SecurityGoogle Cloud PlatformJamfMacOSPython

About the role

Key responsibilities & impact

Build and maintain security detection and incident response capabilities
Triage security alerts and conduct investigations
Lead security response efforts
Develop, tune, and maintain security detection rules and alerts
Manage SIEM infrastructure, including data onboarding, parsing, rule creation, and dashboarding in Google SecOps (Chronicle)
Monitor security across JAMF MDM for macOS endpoints, Google Workspace, Okta, and SaaS applications
Monitor cloud security in Google Cloud and use GCP Security Command Center
Automate detection and response tasks, data parsing, and security tooling integration
Translate attack techniques and threat intelligence into actionable detections
Develop best-in-class security practices as the company scales

Requirements

What you’ll need

Proven experience in incident response and security operations, including triaging security alerts, conducting investigations, and leading response efforts
Strong background in detection engineering, including developing, tuning, and maintaining security detection rules and alerts
Hands-on experience with SIEM infrastructure, specifically Google SecOps (Chronicle), including data onboarding, parsing, rule creation, and dashboarding
Proficiency in security monitoring across JAMF MDM for macOS endpoints, Google Workspace, Okta, and general SaaS applications
Experience with cloud security monitoring, particularly Google Cloud (GCP), with familiarity in GCP Security Command Center (SCC)
Solid scripting skills, such as Python and Bash, for automating detection and response tasks, data parsing, and security tooling integration
Deep understanding of common attack techniques and threat intelligence, with the ability to translate them into actionable detections
Familiarity with security frameworks and best practices, including MITRE ATT&CK and NIST Cybersecurity Framework
Excellent analytical and problem-solving skills, with strong attention to detail and ability to connect disparate information during investigations
Must reside in the same country as the role; strong preference for candidates in London

Benefits

Comp & perks

Annual discretionary professional development stipend
Annual discretionary social travel stipend to meet colleagues
Annual company offsite
Monthly co-working stipend for employees not near a main hub
Innovative culture and growth opportunities