Sr Detection Engineer
Core
Design, build, test, deploy, and tune SIEM detections using multi-source telemetry (network, endpoint, cloud, identity) to protect enterprise infrastructure.
Role type
Senior IC security detection engineer (SIEM)
Builds
Enterprise SIEM platform and detection content
Domain
Cybersecurity / Security Operations
Deliverable
production ML models
Required skills
SIEM engineering, detection content engineering, log ingestion/parsing/normalization, scripting (Python/PowerShell/Bash), query languages (KQL/SPL/EQL/SQL), threat intelligence analysis, automation
Preferred skills
AI/ML concepts for security, NDR/EDR technologies, cloud security telemetry, network protocols (TCP/IP/DNS/HTTP)
Technologies
Splunk, Elastic, Sigma, Python, PowerShell, Bash, KQL, SPL, EQL, ES|QL, SQL, Lucene, Cisco, Palo Alto, Zscaler, SentinelOne, CrowdStrike, Carbon Black, DarkTrace, McAfee
Responsibilities
Drive SIEM platform design, implementation, and optimization; onboard log sources with parsing and enrichment; monitor platform performance and scalability; convert threat intelligence into detection content; define security KPIs and metrics; maintain engineering standards and documentation.
Seniority
Senior, hands-on IC
