# Senior Detection & Response Engineer at Expel

- Company: Expel
- What the company does: Backed by NEA.
- Company website: https://expel.com/
- Type: Startups
- Level: Senior
- Location: Remote
- Work setup: Remote
- Posted: 2026-09-26
- Apply by: 2026-11-10
- Apply: https://expel.com/about/career-listing/8836996002?gh_jid=8836996002
- Page: https://www.1752.vc/careers/jobs/expel-senior-detection-and-response-engineer/

## About the role

You're the detection engineer people turn to when they ask "what does Microsoft actually see here?" Not the marketing-slide answer, the real map. Which product emits which telemetry, any anticipated ingestion lags, what table or API it lands in, which license tier gates it, how long it survives before it ages out, and where the documentation quietly disagrees with reality. When a new technique drops, your first instinct is to ask which Microsoft signal would catch it, and whether customers have it switched on.

## What they're looking for

- Make you one of our recognized authorities on Microsoft detection and response — for our SOC, our engineers, our go-to-market teams, and our customers
- Give you real ownership of Expel's detection coverage across the whole Microsoft security estate
- Put Microsoft telemetry from across our customer base in front of you — a breadth of real-world environments no single enterprise gets to see
- Let you write and tune detections in our own rule engine and watch them run against live signal
- Treat AI tooling (Claude Code and friends) as a first-class part of how you work, not a side experiment
- Enable you to learn from analysts, data scientists, engineers, and responders responsible for various components of Expel's product and services

Tags: Security Engineering