Threat Detection Engineer
Core
Design, develop, test, and maintain high-quality detections for threats including malware, ransomware, identity attacks, insider threats, cloud threats, network, AI, and advanced persistent threats using SIEM, EDR/XDR, cloud, network, identity, and application security platforms.
Role type
Senior IC threat detection engineer (security analytics & ML)
Builds
Security analytics and data pipelines, detection logic, Power BI dashboards, and threat hunting capabilities
Domain
Cybersecurity, Threat Intelligence, Security Analytics, Machine Learning
Deliverable
production ML models
Required skills
Python, SQL, Data Science, Machine Learning, Threat Detection, SIEM/EDR/XDR, MITRE ATT&CK, Threat Hunting, Statistical Analysis, Feature Engineering
Preferred skills
Generative AI, Large Language Models, Agentic AI, Databricks, Spark, Data Lakes, Security Automation
Technologies
Splunk SPL, Microsoft Sentinel KQL, Elastic Query DSL, Sigma, YARA, Suricata, Snort, Power BI, Databricks, Spark, Pandas, NumPy, scikit-learn
Responsibilities
Design and develop detection logic across security platforms; Apply AI/ML techniques to identify anomalous behavior and attack patterns; Build and maintain security analytics and data pipelines; Conduct threat hunting and hypothesis-driven investigations; Map detections to MITRE ATT&CK framework; Analyze false positives/negatives and implement improvements; Collaborate with SOC, IR, and Threat Intelligence teams; Implement detection-as-code practices; Support purple-team exercises and adversary simulations; Develop Power BI dashboards for operational metrics.
Seniority
Senior, hands-on IC
