Engineer, Cybersecurity Threat Detection
Core
Design, build, tune, and maintain detection content for SIEM, EDR, and NDR platforms to detect malicious behavior across global infrastructure.
Role type
Senior IC cybersecurity detection engineer
Builds
Production detection rules, hunting playbooks, and internal automation tooling
Domain
Cybersecurity, Threat Detection, Security Operations
Required skills
SIEM/EDR/NDR platform expertise, detection logic design, threat hunting, MITRE ATT&CK framework, scripting (Python/PowerShell), log analysis, OS internals, networking, authentication
Preferred skills
Sigma rules, detection as code, structured hunting methodologies (PEAK/TaHiTI), AI engineering in security, malware analysis, digital forensics
Technologies
Splunk, Elasticsearch, Tanium, CrowdStrike, SentinelOne, Python, PowerShell, MITRE ATT&CK
Responsibilities
Design and maintain detection content across SIEM, EDR, and NDR platforms; tune detection logic to manage false positive rates and alert volume; map detection coverage to MITRE ATT&CK and identify gaps; integrate threat intelligence into prioritized detection work; execute proactive threat hunts; remediate detection gaps from red team exercises; validate log source health and completeness; build internal automation tooling using scripting
Seniority
Senior, hands-on IC
