Threat Detection Engineer

Unity Technologies Corporation • Columbus, OH

21h

About The Position

UnityTec is seeking a Threat Detection Engineer to engineer advanced threat detection use cases and develop custom SIEM scripts to help defend critical enterprise systems against emerging cyber threats. The role collaborates with cross-functional stakeholders to optimize data telemetry, identify security capability gaps, and prioritize high-fidelity alerting for specific applications. The position is located in Columbus, Ohio; a hybrid schedule may be possible after a preliminary period.

UnityTec is an SBA-certified Woman-Owned Small Business that delivers professional and technical services to government agencies. Its areas of expertise include Industrial and Enterprise Systems Modernization, FIAR, Industrial Facility Transformation, Program and Project Management, Enterprise Support and Consulting, and Advanced Analytics.

Requirements

• Possess at least one of the following certifications: CompTIA Cybersecurity Analyst Plus (CySA+), GIAC Certified Forensic Analyst (GCFA), GIAC Certified Intrusion Analyst (GCIA), or Global Industrial Cyber Security Professional (GICSP).
• At least five years of relevant IT experience.
• At least three years working with a SIEM in a content development or Incident Response role.
• At least three years of System and/or Network Administration experience.
• Understanding of various log formats.
• Understanding of the MITRE ATT&CK framework.
• Strong understanding of network architecture.
• Experience developing and maintaining scripts; PowerShell, Python, or SPL is preferred.
• Understanding of Defense-in-Depth.
• Must be a U.S. citizen.
• Must possess a current DoD Top-Secret clearance.

Nice To Haves

• A bachelor’s degree in a relevant field of study.

Responsibilities

• Research emerging threats and integrate threat intelligence to design, develop, and refine threat detection use cases and custom signatures tailored to individual programs and critical applications.
• Enhance SIEM platforms by developing custom scripts, driving automation, and expanding security analytics capabilities.
• Review incoming data feeds and telemetry and recommend and implement technical improvements to ensure high-fidelity data ingestion and accurate alerting.
• Collaborate with cybersecurity SMEs, system owners, and Threat Detection Analysts to identify vulnerabilities, define alerting priorities, and establish protection strategies for critical systems.

What This Job Offers

• Job Type: Full-time
• Education Level: No Education Listed