Detection Engineering Technical Leader

What you'll do

• Build scalable detection content and automated systems to power 24/7 monitoring operations.
• Design data processing pipelines to transform high-volume security telemetry into actionable alert signals.
• Integrate AI/ML techniques into detection engineering pipelines to reduce false positives and accelerate development.
• Translate threat intelligence and ATT&CK-mapped behaviors into technical detection requirements and coverage metrics.
• Develop and optimize complex search queries in SPL for risk-based alerting and statistical baselining.
• Create automated workflows to reduce manual toil in security triage and response processes.
• Provide technical mentorship and conduct code reviews to improve team engineering standards.
• Produce technical documentation, runbooks, and presentations for both technical and non-technical stakeholders.

What we're looking for

• Must be a U.S. Person (citizen, national, lawful permanent resident, asylee, or refugee).
• Bachelor's degree with 8 years of experience, Master's with 6 years, or PhD with 3 years in security roles.
• Experience deploying and maintaining Splunk Enterprise Security content in a production SOC environment.
• Ability to build scalable detection queries in SPL including risk-based alerting and statistical baselining.
• Experience integrating AI/ML techniques into detection engineering pipelines to reduce false positives.
• Ability to translate threat intelligence and ATT&CK-mapped behaviors into technical detection requirements.
• Proficiency in Python for production scripts with unit tests and version-controlled deployments.
• U.S. citizen, U.S. national, lawful permanent resident, asylee, or refugee.