Detection Engineer

Worldpay • Cincinnati, OH

1d • Hybrid

About The Position

This position is hybrid 3 days per week in either our Cincinnati, OH or Atlanta, GA office. This position is not eligible for remote work. Are you ready to write your next chapter? Make your mark at one of the biggest names in payments. We’re looking for a Detection Engineer to join our ever-evolving Threat Detection and Automation team and help us unleash the potential of every business.

Requirements

• Bachelor’s degree in computer science/information systems or the equivalent combination of education, training, or work experience.
• Typically requires three or more years of experience with: Experience with cloud-native data platforms, event streaming and analytic engines.
• Knowledge of network design and data flow/pipelines.
• Strong understanding of security data lakes, SIEM, EDR, and interacting with SOAR.
• High proficiency with SIEM query languages and scripting languages (Python, R, Powershell, SQL/KQL/LQL).
• Adaptability to new languages and technologies.
• Clean and thoughtful documentation to enable knowledge sharing and reference materials.
• Agile project development methodologies and incident case management experience.
• Familiarity with “detection-as-code” and implementing CI/CD in detection engineering.
• Ability to identify untapped value, while also possessing a “consumer-first” mindset to build outstanding security content.
• In-depth knowledge of security technologies (encryption, data protection, design, privilege access, etc.).

Nice To Haves

• GSEC, GCIH, CISSP or other security or network certifications desired.

Responsibilities

• Develop custom detection logic across SIEM, EDR, and other security tooling within a cutting-edge technology stack.
• Leverage threat modeling, detection engineering frameworks, and other creative methods to produce high-fidelity, investigation-worthy alerting.
• Work closely with cross-functional teams to create tailored, purpose-built security content.
• Lead technical knowledge sharing sessions to empower other teammates and stay on the forefront of content development & beyond.
• Possess a “detection-as-code” mindset to drive security content that is confidently deployed, continuously tested, and expertly tuned.
• Become immersed in our technology stack and logging to deliver solutions that push the boundaries of our security capabilities.
• Use this familiarity to present our security teams with the most relevant data to make quick and accurate decisions.
• Stay current with the latest detection engineering techniques, threat tactics, and industry knowledgebase.
• Shape the future of our data science and advanced analytic efforts.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 1,001-5,000 employees