Threat Detection Engineer
Core
Design, develop, test, and maintain high-quality detections for threats including malware, ransomware, identity attacks, insider threats, cloud threats, network, AI, and advanced persistent threats using SIEM, EDR/XDR, and data science techniques.
Role type
Senior IC threat detection engineer (security analytics & ML)
Builds
Security analytics and data pipelines, detection logic, Power BI dashboards, and threat hunting capabilities
Domain
Cybersecurity, Threat Intelligence, Security Analytics, Machine Learning
Deliverable
production ML models
Required skills
Python, SQL, Data Science, Machine Learning, Threat Detection, SIEM/EDR/XDR, MITRE ATT&CK, Threat Hunting, Statistical Analysis, Feature Engineering
Preferred skills
Generative AI, Large Language Models, Agentic AI, Databricks, Spark, Security Automation
Technologies
Splunk SPL, Microsoft Sentinel KQL, Elastic Query DSL, Sigma, YARA, Python, Pandas, NumPy, scikit-learn, Databricks, Power BI
Responsibilities
Design and develop detection logic across security platforms; Apply AI/ML techniques to identify anomalous behavior; Build and maintain security analytics pipelines; Conduct threat hunting and hypothesis-driven investigations; Map detections to MITRE ATT&CK; Analyze false positives/negatives and implement improvements; Collaborate with SOC, IR, and Threat Intelligence teams; Implement detection-as-code practices; Support purple-team exercises; Develop Power BI dashboards; Document detection logic and procedures.
Seniority
Senior, hands-on IC
