Detection Engineer
Core
Design and develop advanced detection logic for SIEM, EDR, cloud security, and AI-powered systems to identify cyber threats and malicious activities.
Role type
Senior IC detection engineer
Builds
Real-time security alerts and detection rules for S&P Global's critical assets
Domain
Cybersecurity / Threat Detection
Deliverable
production ML models
Required skills
Python, PowerShell, Bash, SQL, SPL, KQL, SIEM platforms, EDR solutions, MITRE ATT&CK, log analysis, telemetry interpretation
Preferred skills
GCIH, GCFA, CISSP, cloud security certifications, Detection-as-Code, CI/CD pipelines, threat hunting, red team exercises, AI/ML in cybersecurity
Technologies
Splunk, QRadar, Microsoft Sentinel, CrowdStrike, SentinelOne, Microsoft Defender, Git, GitLab, Azure DevOps
Responsibilities
Design detection logic for security platforms; Map adversary tactics using MITRE ATT&CK; Tune detection rules to minimize false positives; Implement Detection-as-Code with version control and CI/CD; Validate defenses via red team collaboration; Mentor junior team members
Seniority
Senior, hands-on IC
