Staff Threat Detection Engineer

What you'll do

• Develop, deploy, and optimize detection rules across Microsoft Sentinel and Splunk platforms.
• Conduct threat hunting activities using Microsoft Defender, CrowdStrike, and other SOC tools.
• Create custom detections and automate responses using KQL, SPL, Python, PowerShell, or Bash.
• Design and execute adversary emulation scenarios to assess detection and response effectiveness.
• Perform purple team exercises to bridge offensive and defensive security efforts.
• Integrate threat intelligence into detection strategies to prioritize threats and adapt rules.
• Provide technical insights and adversary tactics during incident response investigations.
• Report on security gaps, risks, and detection effectiveness to leadership.

What we're looking for

• 7+ years of experience in threat detection, hunting, penetration testing, and/or offensive security.
• 5+ years of experience with Microsoft Security tools (Defender for Endpoint, Sentinel), CrowdStrike, and Splunk.
• 3+ years of experience with KQL, SPL, Python, PowerShell, or Bash scripting for automation and detection logic.
• Bachelor’s degree or equivalent experience (High School Diploma and 4 years relevant experience).
• Relevant certifications such as OSCP, GCIH, GCIA, CISSP, CEH, or Microsoft Azure Certification (preferred).
• Experience in managing or participating in purple team exercises (preferred).
• Familiarity with compliance standards like PCI-DSS, HIPAA, or ISO 27001 (preferred).
• Strong understanding of the MITRE ATT&CK framework and security standards such as NIST or CIS (preferred).