Security Detection Engineer

About the role

At WHOOP, we're on a mission to unlock and inspire performance for life. WHOOP empowers members to perform at a higher level through a deeper understanding of their bodies and daily lives.

WHOOP is seeking a Security Detection Engineer to join our growing Information Security team, reporting directly to the Information Security Manager. In this hands-on technical role, you'll be responsible for designing, building, and continuously improving scalable, high-fidelity detection capabilities that safeguard the sensitive biometric and health data of millions of WHOOP members.

You'll play a critical role in strengthening our detection capabilities across cloud, identity, endpoint, and application environments, with a focus on identifying emerging threats, improving detection accuracy, and reducing security risk. This is an opportunity to take meaningful ownership of our detection engineering program, influence its technical direction, and help shape the future of security at WHOOP as we continue to scale.

RESPONSIBILITIES

- Design, build, and scale high-signal detections across cloud, identity, endpoint, network, and application layers using Detection-as-Code principles.

- Develop and maintain detection logic aligned to real-world attacker behavior and frameworks such as MITRE ATT&CK across modern security platforms.

- Translate threat intelligence into actionable detections and validate effectiveness through adversary emulation and testing.

- Build behavioral detections to protect against threats such as account takeover, credential abuse, API misuse, automation attacks, privilege escalation, and data exfiltration.

- Continuously improve detection quality by tuning alerts, reducing false positives, and implementing automated enrichment and triage.

- Define and track detection KPIs (e.g., precision, recall, false positive rate, MTTD) and implement processes to measure and improve detection health.

- Support and lead incident investigations, including containment, root cause analysis, and post-incident detection improvements.

- Contribute to the on-call rotation while proactively reducing operational overhead through automation.

- Partner with Engineering, IT, Infrastructure, Product, and GRC to ensure systems launch with strong monitoring and detection coverage.

- Map detections to threat models, identify visibility gaps, and continuously improve coverage as the environment scales.

- Explore and apply advanced analytics and machine learning techniques to improve detection fidelity, reduce noise, and enhance triage and investigation workflows.

- Stay ahead of evolving threats by researching emerging attack techniques and incorporating learnings into detection strategy.

QUALIFICATIONS

- 4+ years of hands-on experience in Information Security, with a focus on detection engineering, threat detection, or security operations.