Description

You design, write, and maintain detection logic across Splunk, Elastic, QRadar, and Sentinel to identify sophisticated adversary techniques.

This role is on-site.

Responsibilities

• Design and maintain detection rules and correlations across SIEM platforms.
• Engineer behavioral, sequence-based, and threat-informed logic to identify adversary tradecraft.
• Tune detection logic to reduce noise, improve fidelity, and adapt to changing threat landscapes.
• Build and maintain production-grade security dashboards supporting SOC triage and executive decision-making.
• Map detections to MITRE ATT&CK techniques and validate coverage via simulations and incident reviews.

Required Skills

• 5+ years of experience in Detection Engineering, Security Content Development, or Threat Detection.
• Hands-on experience with Splunk, CrowdStrike, Tanium, or Microsoft Defender.
• Deep understanding of security telemetry (endpoint, identity, network, cloud, SaaS) and adversary tradecraft.
• Experience building security dashboards and visualizations for operational SOC or fusion center environments.
• Strong documentation and communication skills to collaborate across teams and operationalize detection strategies.

Preferred Skills

• Any Graduate

Key Skills

Education

Any Graduate