Software Detection Engineer - Cloud, Identity Protection (Hybrid, ISR)

Build globally distributed, fault-tolerant identity threat detection systems that analyze billions of authentication events to detect Active Directory attacks, credential theft, and lateral movement across hybrid and multi-cloud environments. Design and implement real-time detection pipelines over Kafka, develop the detection engine and rule framework, and integrate machine-learning and LLM-based reasoning into production flows. Own detection operations including observability, latency SLOs, and safe rollouts in a polyglot Python/Go/Java stack.