Identity Threat Detection Engineering Specialist

About the company

Experian is a global data and technology company that drives opportunities for people and businesses around the world. We operate in various markets, such as financial services, healthcare, automotive, agribusiness, insurance, among others. Experian invests in people and in new advanced technologies to unlock the power of data. We have an incredible team of 25,200 employees in 32 countries.

Our uniqueness is that we celebrate yours. Experian's people first, inclusive and purpose driven culture is multi award-winning; World's Best Workplaces™ 2025 (Fortune Global Top 25), Great Place To Work™ in 26 countries to name a few. Check out Experian Life on social or explore our Careers Site to understand why. Experian is also proud to be an Equal Opportunity and Affirmative Action employer. If you have a disability or special need that requires accommodation, please let us know at the earliest opportunity.

Your tasks

We are looking for an Identity Threat Detection Engineering Specialist I to work on the development and evolution of threat detection capabilities related to identity, authentication, and access.

The position will work in partnership with Engineering, Security, and Operations teams, using data, events, and telemetry to identify anomalous behaviors, abuse attempts, and potential threats.

Main responsibilities

• Develop and evolve threat detections related to identity, authentication, and authorization.
• Analyze events, logs, and telemetry to identify anomalous behaviors and potential threats.
• Develop detection mechanisms for scenarios such as Account Takeover, Credential Stuffing, authentication abuse, and suspicious activities related to sessions and credentials.
• Participate in investigations of security events and incidents, contributing with technical analysis and root-cause identification.
• Work with Engineering teams to improve the quality and availability of telemetry, logging, and security signals.
• Develop automations to improve the efficiency and coverage of detection capabilities.
• Continuously evaluate existing detections, identifying gaps, false positives, and opportunities for improvement.
• Document attack patterns, detection hypotheses, investigation procedures, and technical recommendations.
• Collaborate with Security Operations, Incident Response, Engineering, and other Security areas.
• Share knowledge and best practices with other professionals and teams.

Requirements

We expect a person with solid technical experience, capable of acting with autonomy, investigating complex problems, and collaborating with different teams, including global teams.

What we expect from a Specialist I We expect a professional with strong technical mastery and capacity for autonomous execution, capable of taking on medium and high complexity security problems.

The person should be able to

• Conduct technical analyses and investigations with autonomy.
• Propose and implement solutions for detection problems.
• Make technical decisions within their area of expertise.
• Identify opportunities for automation and continuous improvement.
• Work effectively with different Engineering and Security teams.
• Communicate risks and technical findings clearly.
• Share knowledge and provide technical support to other professionals.
• Collaborate effectively with globally distributed teams.

• Extensive professional experience in technology, with at least 3 years in Security Engineering, Detection Engineering, Threat Detection, Security Operations, or related areas.
• Experience with threat detection or investigation, including analysis of logs, events, telemetry, and anomalous behaviors.
• Experience or solid knowledge in Identity & Access Management (IAM), authentication, and authorization, including threats related to credentials, sessions, and access.
• Experience with automation or data analysis applied to security, using Python, SQL, or similar technologies, as well as SIEM, observability, or event processing tools.
• Experience working in cross-functional environments, collaborating directly with Engineering, Security, Operations, or Architecture in resolving complex technical problems.
• Advanced or fluent English, with the ability to participate in technical discussions, collaborate with global teams, and produce technical documentation in English.