# Senior Threat Detection Engineer at Cribl

- Company: Cribl
- What the company does: Cribl is built for IT and Security data and provides a unified data management platform for exploring, collecting, processing, and accessing that data at scale. Backed by Greylock, Sequoia and GV.
- Company website: https://cribl.io/
- Type: Startups (AI role)
- Level: Senior
- Location: Remote - United States
- Work setup: Remote
- Posted: 2026-10-07
- Apply by: 2026-11-23
- Apply: https://cribl.io/job-detail/?gh_jid=6217897004&utm_source=1752vc&utm_medium=careers
- Page: https://www.1752.vc/careers/jobs/cribl-senior-threat-detection-engineer/

## About the role

Join the company that’s building the telemetry infrastructure for the AI era. At Cribl, we partner with IT and Security teams at many of the world’s biggest enterprises, including half of the Fortune 100, to bridge the gap between AI ambition and infrastructure reality. As the AI Platform for Telemetry, we give customers the choice, control, and flexibility to manage and analyze telemetry for both humans and agents, so they can build what’s next. Found on 1752vc Careers, the job board for startup and VC roles.

## What they're looking for

- Design, build, test, and tune detections as code (KQL) through a GitOps workflow: issue, pull request, unit and back-testing, then automated deployment
- Map detections to MITRE ATT&CK, find coverage gaps, and decide where to invest next based on our threat model
- Review new community and vendor rule releases, such as Sigma, and decide what to adopt, adapt, or skip
- Cut alert noise by tuning, retiring rules that no longer earn their place, and tracking detection quality metrics
- Plan and run hypothesis-driven hunts across cloud, SaaS, identity, endpoint, and corporate infrastructure telemetry
- Use adversary emulation to generate test events for detections that have nothing to fire on yet

Tags: IT & Security

Source: 1752vc Careers, https://www.1752.vc/careers/jobs/cribl-senior-threat-detection-engineer/