Senior Detection Engineer
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior Detection Engineer strengthening SAIC’s enterprise cybersecurity defenses through Splunk, SIEM, EDR, and Python automation. Improving threat detection, incident response, and defensive operations for a mission technology integrator.
Responsibilities:
- Develop, deploy, and maintain high-fidelity detections across SIEM, EDR, and other security telemetry platforms
- Validate alerts, refine workflows, and align detections with operational analyst needs
- Provide detection-focused support during active incidents, including tuning recommendations, data enrichment, and technical guidance
- Tune and optimize detections to improve fidelity, reduce false positives, strengthen efficiency, and close visibility gaps
- Perform advanced threat and telemetry analysis to confirm detection performance and identify adversary behaviors
- Translate cyber threat intelligence, TTPs, indicators, and behavioral patterns into actionable detections
- Partner with CTI, Offensive Security Operations, and Purple-Team operators to validate detection logic through adversary emulation
- Convert threat-hunting discoveries, vulnerability insights, and purple-team findings into improved detection logic and monitoring
- Maintain documentation for detection logic, tuning actions, workflows, and operational standards
- Mentor Detection Engineering analysts and support Detection & Response personnel development
- Contribute to ESOC/DCO improvement initiatives, engineering sprints, automation, detection content onboarding, and process refinement
- Lead post-incident detection reviews and improve detection coverage
- Enhance ESOC dashboards, analytics, and tooling for monitoring, triage, and investigations
- Support 24/7/365 operational coverage during high-priority events
- Perform additional operational duties as assigned
Requirements:
- Bachelor’s degree and 5+ years related experience, or a Master’s degree and 3+ years of related experience
- An additional 4+ years of experience may be considered in lieu of a degree
- Minimum of 3 years of cybersecurity operations experience working with the enterprise SIEM Splunk
- Must possess CySA+, SSCP, or equivalent certification
- Must obtain Splunk Certified Cybersecurity Defense Engineer certification within six months of hire
- Advanced proficiency in Splunk SPL and Python for security automation and workflow development
- Strong leadership skills with ability to lead and motivate a team effectively
- Excellent verbal and written communication skills
- Ability to multitask and collaborate to solve complex technical problems
- Must support 24/7/365 operations when required
Benefits:
- Remote work option for qualified candidates
- 4×10 schedule, Monday–Thursday, 07:00 a.m. EST–5:00 p.m. EST
- Opportunity to mentor analysts and contribute to professional capability development
Similar Jobs
Compiler Performance Engineer
Compiler Performance Engineer optimizing Azul's LLVM-based Falcon JIT compiler. Improving generated machine code and Java performance for enterprise workloads across India.
Senior Compiler Performance Engineer
Senior Compiler Performance Engineer improving Azul's Falcon JIT compiler and generated machine code. Designing optimizations and delivering measurable speedups across production Java workloads.
Staff Compiler Performance Engineer
Staff Compiler Performance Engineer setting performance strategy for Azul’s Falcon JIT compiler. Leading optimizations, architecture, hardware enablement, and LLVM contributions.
Professional Services Engineer
Professional Services Engineer implementing VidiNet media asset management solutions for customers. Configuring media workflows, integrations, APIs, and delivery systems across European remote locations.
Lift Engineer
Lift Engineer servicing, repairing, and troubleshooting lifts across Didcot and nearby areas for Stannah, a global mobility-equipment manufacturer. Managing a structured local route and maintaining safe, compliant sites.
Lift Repair Engineer
Lift Repair Engineer repairing, troubleshooting, and restoring lifts across Reading and surrounding areas. Maintaining Stannah’s residential, commercial, and public access systems.
Generator Modeling Engineer
Principal engineer overseeing renewable generator models, interconnection studies, and compliance for AES Clean Energy. Leading engineers and consultants across the project lifecycle.
Forward Deployed Engineer
Forward Deployed Engineer helping Nango, an AI integration platform, build customer integrations. Coding full-stack improvements while leading technical evaluations, pairing sessions, and production support.
Senior Performance Engineer
Senior Performance Engineer analyzing solar PV assets for Wizeline, an AI-native technology solutions provider. Optimizing plant performance through SCADA data, modeling, and predictive analytics.
Integrity Engineer – Inspection and Repair Specialist
Engenheiro de Integridade diagnosticando danos e especificando reparos em tubulações e equipamentos offshore. Ocyan presta serviços técnicos para a indústria de óleo e gás upstream.
Senior Controls Engineer – Automated Distribution
Senior Controls Engineer optimizing PLC, robotics, and warehouse systems for SanMar’s wholesale apparel distribution network. Leading automation projects, troubleshooting, and controls integration across high-volume facilities.
Ingeniero/a de Safety, Automotive SPICE
Ingeniero/a de Safety y Automotive SPICE liderando proyectos de desarrollo automotriz para Expleo. Gestionando ISO 26262, auditorías ASPICE y coordinación técnica con clientes.
Senior SailPoint Engineer
Senior SailPoint Engineer configuring SailPoint identity governance for VIATEQ’s federal government customers. Developing IGA workflows, connectors, scripts, and Zero Trust-compliant access solutions.
Senior Okta Engineer
Senior Okta Engineer integrating legacy federal applications with VIATEQ’s centralized ICAM platform. Configuring Okta, SSO, MFA, federation, and Zero Trust access for government customers.
Senior Software Safety Engineer – Autonomous Vehicles
Senior Software Safety Engineer advancing NVIDIA’s Halos safety system for autonomous vehicles. Developing and validating safety processes across AI software, embedded platforms, and certification activities.
Forward Deployed Engineer
Forward Deployed Engineer deploying Swarm Aero's C2 software with military operators. Troubleshooting distributed systems and developing field software for swarming UAV missions.
PS Engineer IV
Senior software engineer building secure, resilient Azure cloud solutions for NCR Atleos, a financial-access technology company. Managing DevOps, automation, cloud operations, and adoption.
Lift Engineer
Lift Engineer servicing, repairing, and maintaining lifts across Newcastle and surrounding areas. Supporting Stannah’s manufacturing and engineering business through safe, reliable access equipment operation.
Senior VoIP Engineer
Senior VoIP Engineer architecting secure VoIP and unified communications infrastructure for federal agencies. Leading Cisco platforms, compliance, incident response, and modernization across classified enclaves.
Intern Project Engineer
Project Engineering Intern supporting DEME’s marine, civil, environmental, and infrastructure projects. Coordinating field operations, planning, calculations, reporting, and technical assessments.