Detection & Automation Engineer III
Core
Design, develop, test, and maintain advanced threat detections across cloud, identity, endpoint, database, and application environments using Splunk Enterprise Security and telemetry engineering.
Role type
Senior IC detection & automation engineer (SIEM)
Builds
Scalable detection capabilities, security logging standards, and automated threat response workflows
Domain
Cybersecurity, SIEM administration, telemetry engineering
Required skills
Splunk Enterprise Security, threat detection engineering, log management, telemetry engineering, Python/PowerShell scripting, CI/CD pipelines, MITRE ATT&CK frameworks, database monitoring, security data normalization
Preferred skills
Cribl Stream, regulated environment monitoring, database administration, large-scale telemetry architectures, Detection-as-Code methodologies, security automation solutions, audit logging standards, Splunk Core Certified Power User, Splunk Enterprise Certified Administrator, GIAC, CISSP, GCIA, GCIH
Technologies
Splunk Enterprise Security, Splunk Enterprise, Cribl Stream, Python, PowerShell, Git, CI/CD pipelines
Responsibilities
Design and maintain threat detections across security platforms; optimize Splunk Enterprise Security frameworks and dashboards; troubleshoot security data ingestion and parsing; onboard new security data sources; develop monitoring for enterprise databases and applications; contribute to Detection-as-Code initiatives; mentor junior engineers
Seniority
Senior, hands-on IC
