Join Quora as a Detection & Corporate Security Engineer to enhance security across corporate and production environments in a remote-first setting.
Posted by employer 5 months ago
First seen on Joblaze 1 month ago
Last verified on the company career page 14 hours ago
Skills & Technologies
AI in the day-to-day
Leverage AI to work efficiently at scale.
Requirements
Not disclosed in this posting: visa sponsorship.
Benefits
Joblaze summary
In this role, the Detection & Corporate Security Engineer at Quora focuses on enhancing security measures for both corporate and production environments by building and maintaining detection systems. Key skills include experience with SIEM infrastructure, endpoint security tools, and strong Python programming capabilities. This position is ideal for seasoned professionals with over five years in security engineering, particularly those who thrive in small, agile teams. Quora's security team emphasizes a collaborative approach, leveraging AI to address real-world threats effectively.
Joblaze insights
Quick facts
From the original posting
[Quora is a privately held, "remote-first" company. This position can be performed remotely from anywhere in Canada or the United States. Please visit careers.quora.com/eligible-countries for details regarding employment eligibility by country.]
Quora: a global knowledge sharing platform with millions of monthly unique visitors, bringing people together to share insights on various topics and providing a unique platform to learn and connect with others.
This role will be supporting both our Quora and Poe products.
Quora's Security team is responsible for protecting the company's most critical assets from both external threats and insider risks. We're a small, high-ownership team with a pragmatic, builder-oriented approach: we build where commercial solutions don't fit, leverage AI to work efficiently at scale, and move fast to stay ahead of real-world threats.
We're looking for a Detection & Corporate Security Engineer to strengthen both our preventative and detection capabilities across corporate and production environments. This is a genuinely hybrid role: you'll build and maintain detection systems while also owning the corporate security controls that protect our employee fleet and internal infrastructure. You'll work closely with our IT team, collaborate with existing security engineers on production-side coverage, and serve as a trusted security advisor to non-technical teams across the organization.
Build and maintain a SIEM to collect and analyze logs from across corporate and production systems; write and deploy detections and alerts to identify malicious behavior
Design and deploy canary tokens and early warning mechanisms to detect threats before they reach critical assets
Investigate security incidents end-to-end — including malware analysis, exfiltration assessment, and timeline reconstruction — and build runbooks to scale response capabilities
Partner with IT to define and enforce security standards across the employee device fleet, including endpoint protection, managed device requirements, OS compliance, and VPN access controls
Drive the PoC and implementation of Zero-Trust VPN and other corporate security infrastructure
Provide security guidance and advisory support to non-engineering functions across the organization
Availability for meetings and impromptu communication during Quora's “coordination hours" (Mon-Fri: 9am-3pm Pacific Time)
5+ years of experience in security engineering, detection engineering, or a closely related field
Hands-on experience building or maintaining SIEM infrastructure and writing detection rules
Experience with endpoint security tools (e.g. CrowdStrike or similar EDR platforms)
Strong Python engineering skills with a track record of writing production code reviewed and shipped alongside software engineering teams
Experience conducting security incident investigations, including malware analysis, log review, and timeline reconstruction and threat modeling
Experience with corporate security controls, identity management, endpoint protection, and access control enforcement
Experience with SIEM/SOAR options such as Elastic/Splunk or alternatives
Familiarity with identity platforms such as Okta
Strong understanding of authentication technology such as OAuth, Yubikey and Passkey
Experience with Zero-Trust network architecture or VPN implementation
Demonstrated use of AI coding tools to build or automate security workflows
Experience in a small security team or fast-paced startup environment
Familiarity with AWS and cloud-native security tooling
We are accepting applications on an ongoing basis.
US candidates only: For US based applicants, the salary range is $172,279 - $249,640 USD + equity + benefits.
Canada candidates only: For Toronto and Vancouver based applicants, the salary range is $220,272 - $255,347 CAD + equity + benefits. For all other locations in Canada, the salary range is $205,587 - $238,324 CAD + equity + benefits.
Job Applicant Privacy Notice: https://careers.quora.com/quora-global-job-applicant-privacy-notice
#LI-JC1
#LI-REMOTE
Standard company text repeated across Quora's postings is omitted here.