Associate Principal Engineer, Detection & Response
Unisys
full-time
Posted on:
Location Type: Remote
Location: Remote • Pennsylvania • 🇺🇸 United States
Visit company websiteJob Level
JuniorMid-Level
Tech Stack
PythonSplunk
About the role
- Design, develop, and maintain high-fidelity detection rules and analytics for enterprise security tools
- Translate threat intelligence into actionable detection logic
- Lead and conduct advanced security investigations and threat hunting activities
- Collaborate with Incident Response teams for effective communication and response
- Serve as the primary technical liaison for Managed Security Service Provider (MSSP) partners
- Develop and maintain automation scripts and tools to enhance response capabilities
- Maintain comprehensive documentation for knowledge sharing and auditing purposes
- Stay abreast of the latest security threats, vulnerabilities, and emerging technologies
Requirements
- Active US Security Clearance or eligibility for clearance reinstatement is required
- In-depth understanding and practical experience with Security Information and Event Management (SIEM) systems (e.g., Splunk, Google SecOps)
- Strong knowledge of Endpoint Detection and Response (EDR) and Intrusion Detection/Prevention Systems (IDS/IPS)
- Proficiency in scripting languages (e.g., Python, PowerShell, Bash)
- Solid understanding of network security, protocols, and traffic analysis
- Familiarity with threat intelligence platforms and frameworks (e.g., MITRE ATT&CK)
- Exceptional analytical skills to analyze large, complex datasets
- Demonstrated ability to think critically, troubleshoot complex problems, and make sound decisions under pressure
- Strong verbal and written communication skills for reporting findings and collaborating effectively
Benefits
- Health insurance
- Paid time off
- Flexible work hours
- Professional development opportunities
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard skills
detection rulesanalyticsthreat intelligencesecurity investigationsthreat huntingautomation scriptsSecurity Information and Event Management (SIEM)Endpoint Detection and Response (EDR)Intrusion Detection/Prevention Systems (IDS/IPS)scripting languages
Soft skills
analytical skillscritical thinkingtroubleshootingdecision makingcommunication skills
Certifications
US Security Clearance