Threat Detection Engineer

Unity Technologies Corporation • Richmond, VA

7h

About The Position

UnityTec is seeking a Threat Detection Engineer to engineer advanced threat-detection use cases and develop custom SIEM scripts to proactively defend critical enterprise systems against emerging cyber threats. The role collaborates with cross-functional stakeholders to optimize data telemetry, identify security capability gaps, and prioritize high-fidelity alerting tailored to specific applications. The position is located in Richmond, Virginia; a hybrid schedule may be possible after a preliminary period.

Requirements

• Must possess at least one of the following certifications: CompTIA Cybersecurity Analyst Plus (CySA+), GIAC Certified Forensic Analyst (GCFA), GIAC Certified Intrusion Analyst (GCIA), or Global Industrial Cyber Security Professional (GICSP).
• At least five years of relevant IT experience.
• At least three years working with a SIEM in a content development or Incident Response role.
• At least three years of System and/or Network Administration experience.
• Understanding of various log formats.
• Understanding of the MITRE ATT&CK framework.
• Strong understanding of network architecture.
• Experience developing and maintaining scripts, preferably using PowerShell, Python, or SPL.
• Understanding of Defense-in-Depth.
• Must be a U.S. citizen.
• Must possess a current DoD Top Secret clearance.

Nice To Haves

• A bachelor’s degree in a relevant field of study.

Responsibilities

• Research emerging threats and integrate threat intelligence to design, develop, and refine threat-detection use cases and custom signatures tailored to individual programs and critical applications.
• Enhance SIEM platforms by developing custom scripts, driving automation, and expanding security analytics capabilities.
• Review incoming data feeds and telemetry, and recommend and implement technical improvements to ensure high-fidelity data ingestion and accurate alerting.
• Partner with cybersecurity subject matter experts, system owners, and Threat Detection Analysts to identify vulnerabilities, define alerting priorities, and establish protection strategies for critical systems.

What This Job Offers

• Job Type: Full-time
• Education Level: No Education Listed