Binary Defense

Engineer

• Lead threat-informed detection efforts by staying current with emerging adversary techniques, malware, and campaigns; ensure the detection backlog reflects the most relevant threats.
• Guide the Detection Engineering team on prioritization, coverage, and detection choke points that deliver the most meaningful risk reduction for clients.
• Design, implement, and validate detections across SIEM (Splunk, Sentinel, Chronicle) and EDR platforms (CrowdStrike, Cortex XDR, SentinelOne, Defender for Endpoint) using a detection-as-code approach.
• Assist with development of detection-as-code solutions using Python and REST APIs, enabling CI/CD pipelines for rule deployment, testing, and telemetry inspection.
• Collaborate with Threat Intel, IR, and SOC teams to transform intelligence into high-fidelity detection logic.
• Contribute to threat modeling and coverage mapping to identify gaps and reduce detection blind spots.
• Participate in adversary emulation and validation efforts (e.g., Atomic Red Team, custom tooling).
• Mentor junior engineers to better understand attack chains and how adversaries operate.
• Support threat research by building capabilities to extract threat intelligence insights from detection engineering efforts.

Senior Detection Engineer