Lead Detection Engineer, Cyber Defense & Response

What you'll do

• Lead the design and implementation of enterprise-scale cyber threat detection capabilities across diverse technologies.
• Drive advanced research into adversarial TTPs to create proactive detection methodologies for cloud and on-prem platforms.
• Partner with Cyber Threat Intelligence to prioritize and operationalize intelligence into high-impact detection coverage.
• Collaborate with Cyber Threat Hunting to transform successful hunts into automated, scalable detections.
• Architect and oversee the development of detection engineering automations, frameworks, and reusable tooling.
• Identify and implement improvements for detection engineering tooling, infrastructure, and data visibility across the enterprise.
• Provide authoritative insight on detection gaps and drive remediation efforts with platform owners and security architects.
• Coach and mentor team members to foster technical excellence and analytical rigor.

What we're looking for

• Extensive experience in detection engineering, incident response, threat hunting, or similar security operations roles.
• Expert understanding of risk-based alerting strategies and detection methodologies for enterprise-wide models.
• Deep knowledge of large enterprise architectures including networks, operating systems, cloud ecosystems, and telemetry pipelines.
• Expert-level understanding of adversarial frameworks like MITRE ATT&CK and the Cyber Kill Chain.
• Advanced proficiency in Splunk Enterprise Security architecture, correlation searches, and risk frameworks.
• Advanced experience with SPL and KQL for designing scalable and maintainable detection libraries.
• Strong familiarity with SOAR, CI/CD, code repositories, and engineering pipelines.
• Industry relevant certifications such as GDAT, GCDA, GCTD, GCTI, GMON, GPEN, GCIH, GCFA, OSCP, OSCE, OSWE, or equivalent (preferred).