Detection Engineer
Core
Design and develop advanced detection logic for SIEM, EDR, cloud security, and AI-powered systems to identify cyber threats and malicious activities.
Role type
Senior Detection Engineer (Cybersecurity)
Builds
Real-time security alerts and detection rules for S&P Global's critical assets
Domain
Cybersecurity / Threat Detection
Deliverable
production ML models
Required skills
Python, PowerShell, Bash, SQL, SPL, KQL, SIEM platforms, EDR solutions, MITRE ATT&CK, log analysis, telemetry interpretation
Preferred skills
GCIH, GCFA, CISSP, cloud security certifications, Detection-as-Code, CI/CD pipelines, threat hunting, red team exercises, AI/ML in cybersecurity
Technologies
Splunk, QRadar, Microsoft Sentinel, CrowdStrike, SentinelOne, Microsoft Defender, Git, GitLab, Azure DevOps
Responsibilities
Design detection logic for security platforms, map adversary tactics using MITRE ATT&CK, tune detection rules to reduce false positives, implement Detection-as-Code with CI/CD, validate defenses via red team collaboration, mentor junior team members
Seniority
Senior, hands-on IC