Description

You will own detection engineering, designing rules and logic to identify and respond to security threats across the infrastructure.

This role is remote.

Responsibilities

• Design and implement detection rules and logic to identify security threats.
• Configure and fine-tune detection systems, including SIEM, EDR, ITDR, and email security tools.
• Develop policies and logic engineering to support detection and response use cases.
• Monitor and optimize alerts to reduce noise and increase actionable intelligence.
• Conduct analysis of detection gaps and participate in threat hunting activities.

Required Skills

• Extensive hands-on experience configuring and setting up detection systems.
• Broad detection engineering experience with SIEM, EDR, ITDR, and email security.
• Proficiency with CrowdStrike and Wiz.
• Experience using Proofpoint and Tenable.
• Practical knowledge of ServiceNow.
• Ability to maintain documentation on detection logic, configurations, and incident findings.
• Experience supporting incident response with detection insights and evidence.

Key Skills

Education

Not specified