Detection & CorpSec Engineer (Remote)

About the role

Quora is seeking a Detection & Corporate Security Engineer to strengthen preventative and detection capabilities across both corporate and production environments. This remote‑first role supports Quora’s knowledge‑sharing platform and Poe AI workspace.

Key responsibilities

• Build and maintain a SIEM to collect and analyze logs, writing detections and alerts for malicious behavior.
• Design and deploy canary tokens and early‑warning mechanisms.
• Investigate security incidents end‑to‑end, including malware analysis and timeline reconstruction, and create runbooks.
• Partner with IT to define and enforce security standards for employee devices, endpoint protection, OS compliance, and VPN access.
• Drive proof‑of‑concept and implementation of Zero‑Trust VPN and other corporate security infrastructure.
• Provide security guidance to non‑engineering functions across the organization.

Required profile

• 5+ years of experience in security engineering, detection engineering, or a closely related field.
• Availability for meetings during Quora’s coordination hours (Mon‑Fri 9am‑3pm PT).
• Hands‑on experience building or maintaining SIEM infrastructure and writing detection rules.
• Experience with endpoint security tools such as CrowdStrike or similar EDR platforms.
• Strong Python engineering skills with production‑grade code.

Required skills

• SIEM platforms (e.g., Elastic, Splunk) and SOAR concepts.
• Python programming.
• Endpoint detection and response tools (e.g., CrowdStrike).
• Identity platforms such as Okta.
• Authentication technologies (OAuth, Yubikey, Passkey).
• Zero‑Trust network architecture and VPN implementation.
• AWS and cloud‑native security tooling.

What we offer

• Medical, dental, and vision coverage.
• Equity refreshers and flexible equity program.
• Remote‑work reimbursement.
• Paid time off and employee assistance programs.
• Competitive salary range ($172,279‑$249,640 USD) plus equity and benefits.