Sr Detection Engineer
Core
Design, build, test, deploy, and tune SIEM detections using network, endpoint, cloud, and identity telemetry to protect enterprise systems.
Role type
Senior IC security detection engineer (SIEM/NDR/EDR)
Builds
Enterprise SIEM platform, detection rules, and security analytics pipelines
Domain
Cybersecurity, SIEM, Network Detection and Response, Endpoint Detection and Response
Required skills
SIEM engineering, detection content engineering, log ingestion and parsing, scripting (Python/PowerShell/Bash), query languages (KQL/SPL/EQL/SQL), threat intelligence analysis, data pipeline fundamentals, API usage, version control (Git)
Preferred skills
AI/ML concepts for security automation, Zscaler familiarity, SSL/TLS and PKI management, cloud security telemetry, automation-first mindset
Technologies
Splunk, Elastic, Sigma, KQL, SPL, EQL, ES|QL, SQL, Lucene, Cisco Firepower, SentinelOne, CrowdStrike, Carbon Black, Cylance, DarkTrace, McAfee, Zscaler
Responsibilities
Drive SIEM platform design, implementation, and optimization; onboard and normalize log sources; convert threat intelligence into detection content; monitor platform performance and scalability; troubleshoot data ingestion and correlation issues; define security KPIs and engineering metrics; maintain detection exceptions and rule changes; link engineering outcomes to security strategy
Seniority
Senior, hands-on IC
