Endpoint Detection Engineer

State Street

Confirmed live today High trust

Quick summary

Work type
On-site
Location
Atlanta, GA
Employment
Full-time
Posted
48 days ago
Freshness
Confirmed live today

Market check

Salary context

How this pay compares to similar roles

Similar $189k
$132k $238k
below market most similar roles pay here above market

This listing doesn't post a salary. Most similar roles pay $151,475–$225,800.

Based on 240 similar postings.

Employer

About State Street

State Street Corporation is one of the world''s largest custodian banks and asset managers, providing investment servicing, investment management, and investment research to institutional investors. Industry: Financial Services & Asset Custody

State Street currently has 351 open roles on FindRole.

Listed pay typically runs $115,000–$195,944 across 199 roles with salary data.

Most-posted roles

View all roles at State Street

At a glance

TL;DR · Endpoint Detection Engineer

The Endpoint Detection Engineer joins the Global Cybersecurity team to detect potential cyber-attacks and generate alerts for the security operations center. You will draft and deliver detection use cases using Falcon Query Language and other security query languages while documenting processes in Jira and Confluence. Responsibilities include investigating threat reports, writing business cases, and presenting production-ready use cases to executive governing boards. You will utilize Python, R, SQL, RegEx, PERL, and Powershell for data manipulation and scripting. The role requires proficiency in Splunk, PowerBI, and PowerPoint to analyze high-volume datasets and infrastructure telemetry. You must understand the global threat landscape, including adversary tactics, techniques, and procedures. This position focuses on enhancing detection functions and driving better protection within a large financial services environment.

What you'll do

  • Draft and deliver detection use cases in Falcon Query Language (FQL) and other security query languages.
  • Create and maintain Jira and Confluence pages for detection use cases following prescribed business processes.
  • Investigate threat reports and requests to determine if new detection use cases are warranted.
  • Present production-ready use cases to executive governing boards for review and approval.
  • Write detection-oriented business cases, project plans, and reasoned explanations to support detection engineering projects.
  • Analyze high-volume datasets to uncover patterns and actionable insights for cybersecurity defense.
  • Perform data manipulation and reporting using Python, R, or similar analytics languages.

What we're looking for

  • Two years of experience in cybersecurity detection engineering gained through a Bachelor’s (BSc) in STEM, employment, or volunteering.
  • Ability to code detection use cases using SPL or FQL.
  • Ability to use Splunk for detection engineering.
  • Ability to perform data manipulation, analysis, and reporting using Python, R, or similar analytics languages.
  • Ability to use Structured Query Language (SQL).
  • Ability to use Jira and Confluence to develop, document, and release use cases into production.
  • Knowledge of the cyber global threat landscape, adversaries, TTPs, threat intelligence, and malware.
  • Industry recognized cybersecurity certifications with demonstrable, hands-on proficiency (preferred).

More like this

Similar roles

Senior Security Engineer, Detection Engineering

Nvidia

Remote (CA) +2 48 days ago
Splunk Microsoft Sentinel Defender CrowdStrike Python SQL KQL SPL Git CI/CD Kubernetes Detection-as-Code SIEM Threat Hunting Incident Response Cloud Security Identity Telemetry Endpoint Data
8+ yrs exp Remote

Detection Engineer

S&P Global

New York, NY 1 day ago $140,000–$155,000
Python PowerShell Bash SQL SPL KQL Splunk Microsoft Sentinel QRadar CrowdStrike SentinelOne Microsoft Defender AWS Azure Google Cloud Git GitLab Azure DevOps CI/CD MITRE ATT&CK Detection-as-Code
5+ yrs exp

Endpoint Detection & Response Engineer

Booz Allen Hamilton

Scott AFB, IL 123 days ago
EDR Carbon Black EDR CrowdStrike Falcon SentinelOne FireEye HX McAfee MVision Microsoft Defender for Endpoint Tanium Elastic Endpoint Protection SIEM ITSM TIP Splunk SOC Systems Administration Automated Workflows Playbooks

Endpoint Detection & Response Engineer, Senior

Booz Allen Hamilton

Scott AFB, IL 123 days ago
EDR Carbon Black EDR CrowdStrike Falcon SentinelOne FireEye HX McAfee MVision Microsoft Defender for Endpoint Tanium Elastic Endpoint Protection SIEM ITSM TIP Splunk SOC Systems Administration Playbooks Risk Management

Endpoint Engineer

Apex

Austin, TX 74 days ago
Microsoft Intune Entra ID Kandji Apple Business Manager PowerShell Python Microsoft Graph API Jamf Pro Group Policy Git Windows macOS Linux Android SAML OAuth OIDC SCEP PKCS ServiceNow
2+ yrs exp Hybrid

Endpoint Engineer

General Dynamics

Washington, DC 5 days ago $140,250–$189,750
Endpoint Management Windows macOS Configuration Management OS Imaging Patch Management Vulnerability Remediation Tier 3 Support IT Infrastructure IT Configuration Management Software Delivery Security Updates
5+ yrs exp Hybrid