100% Remote Security Engineer-Detection Engineer
About The Position
The Security Engineer-Detection Engineer will design and architect detection and monitoring systems, including logging, monitoring, alerting, detection rules, and tool tuning. The role requires hands-on configuration of detection systems and development of policies and logic for detection and response use cases. Candidates should demonstrate experience architecting detection and monitoring systems from the ground up, not only operating tools. The position involves developing and tuning advanced detection logic, including writing and deploying rules for SIEM and EDR platforms using languages and formats such as SPL, KQL, Sigma, and YARA. It also includes applying knowledge of threat actor tactics, techniques, and procedures (TTPs), including MITRE ATT&CK and the cyber kill chain, and contributing to SOC and detection strategy. The engineer will collaborate with stakeholders to align detection efforts with business risks and advocate for improvements to processes and technology. The role also includes automating log ingestion, data enrichment, and alert triage, using scripting such as Python and PowerShell.
Requirements
- Hands-on experience configuring and setting up detection systems.
- Broad detection engineering experience across SIEM, EDR, ITDR, and email security tools.
- Practical knowledge of tools such as CrowdStrike, Wiz, Proofpoint, Tenable, and ServiceNow.
- Experience in detection engineering and architecture, including designing logging, monitoring, alerting, rules, and tool tuning.
- In-depth experience developing and tuning detection logic, including advanced SIEM and EDR rules.
- Advanced understanding of threat actor TTPs, MITRE ATT&CK, and the cyber kill chain.
- Experience automating log ingestion, data enrichment, and alert triage.
- Familiarity with Python and PowerShell scripting.
Responsibilities
- Configure and set up detection systems.
- Design detection architecture, including logging, monitoring, alerting, rules, and tuning of tools.
- Develop policies and detection logic supporting detection and response use cases.
- Write, deploy, and tune advanced detection rules in SIEM and EDR systems using SPL, KQL, Sigma, and YARA.
- Contribute to SOC and detection strategy, collaborating with stakeholders to align detection efforts with business risks.
- Advocate for improvements to detection processes and technology.
- Automate log ingestion, data enrichment, and alert triage using scripting.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Education Level
No Education Listed
