Translate threat intelligence into actionable detection use cases.
Stay current on emerging threats, attacker TTPs, and detection technologies.
Work under the guidance of Lead and Principal Detection Engineers to implement scalable detection strategies.
Support continuous improvement initiatives within the detection engineering function.
Support engineering and operational efforts for threat detection platforms including Splunk, CrowdStrike, and Microsoft Defender.
Develop and tune detection logic mapped to MITRE ATT&CK techniques.
Create and maintain dashboards, alerts, and reports to support threat detection and incident response.
Collaborate with cross-functional teams to ensure alignment of detection content with threat intelligence and business priorities.
Assist in the integration of threat intelligence feeds and automation tools to enrich detection pipelines.
Participate in detection content lifecycle management including testing, deployment, and refinement.
Contribute to documentation and playbooks for detection engineering processes.

Requirements

4+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
2+ years of hands-on experience with Splunk, CrowdStrike, and Microsoft Defender.
Working knowledge of MITRE ATT&CK framework and threat actor TTPs.
Experience developing and tuning detection content for high signal-to-noise ratio.
Familiarity with scripting languages such as Python or PowerShell.

Benefits

Health benefits
401(k) Plan
Paid time off
Disability benefits
Life insurance, critical illness insurance, and accident insurance
Parental leave
Critical caregiving leave
Discounts and savings
Commuter benefits
Tuition reimbursement
Scholarships for dependent children
Adoption reimbursement

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

threat intelligencedetection use casesdetection logicscripting languagesPythonPowerShelldetection contentsignal-to-noise ratioincident responseautomation tools

Soft Skills

collaborationcontinuous improvementdocumentationcommunicationalignment with business priorities