Engineer, Cybersecurity Threat Detection
Core
Design, build, tune, and maintain detection content for SIEM, EDR, and NDR platforms to detect malicious behavior across global infrastructure and proactively hunt for threats.
Role type
Senior IC cybersecurity detection engineer
Builds
Detection content, hunting playbooks, and internal automation tooling
Domain
Cybersecurity, Threat Detection, Security Operations
Required skills
SIEM/EDR/NDR platform expertise, detection logic design, threat intelligence integration, proactive threat hunting, MITRE ATT&CK framework, scripting (Python/PowerShell), log source health validation, OS internals, networking, authentication
Preferred skills
Sigma rules, detection as code, structured hunting methodologies (PEAK/TaHiTI), applied AI engineering in security, malware analysis, digital forensics, reverse engineering
Technologies
Splunk, Elasticsearch, Tanium, CrowdStrike, SentinelOne, Python, PowerShell, MITRE ATT&CK
Responsibilities
Design and maintain detection content across SIEM, EDR, and NDR platforms; tune detection logic to manage false positive rates and alert volume; map detection coverage to MITRE ATT&CK and identify gaps; convert threat intelligence into prioritized detection and hunting work; execute proactive threat hunts to discover evading threats; remediate detection gaps from red team exercises; validate health and completeness of security log sources; build internal tooling using scripting to automate data processing
Seniority
Senior, hands-on IC
