Detection Engineer
Core
Design and develop advanced detection logic for SIEM, EDR, cloud security, and AI-powered systems to identify cyber threats and malicious activities.
Role type
Senior IC detection engineer
Builds
Real-time security alerts and detection rules
Domain
Cybersecurity / Threat Detection
Deliverable
production ML models
Required skills
Python, PowerShell, Bash, SQL, SPL, KQL, SIEM platforms, EDR solutions, MITRE ATT&CK, log analysis, telemetry interpretation
Preferred skills
GCIH, GCFA, CISSP, AWS Security, Azure Security, Google Cloud Security, Detection-as-Code, Git, CI/CD pipelines, automated testing, threat hunting, red team exercises, penetration testing, AI/ML in cybersecurity
Technologies
Splunk, QRadar, Microsoft Sentinel, CrowdStrike, SentinelOne, Microsoft Defender, Git, GitLab, Azure DevOps
Responsibilities
Design detection logic for security platforms; Map adversary tactics using MITRE ATT&CK; Tune detection rules to minimize false positives; Implement Detection-as-Code with version control and CI/CD; Validate defenses via red team collaboration; Lead initiatives and mentor junior members
Seniority
Senior, hands-on IC