Security Detection Engineer III

Job Description

Role Overview

The Security Engineer III, Detection Engineering is a career-level security engineering professional responsible for developing, testing, deploying, and continuously improving detection capabilities that support Security Operations. As part of the Security Operations Platform Engineering (SOPE) team, this role focuses on transforming threat intelligence, telemetry, and security requirements into reliable, actionable detections that improve visibility and reduce organizational risk.

What You Will Do

Develop and maintain custom detections using Detection-as-Code practices, analyze and improve detection coverage, partner with Incident Response, Threat Intelligence, Logging Engineering, and platform engineering teams to build scalable, threat-driven detection capabilities, and automate and optimize detection engineering workflows.

Why It Might Be a Fit

The ideal candidate will have a strong understanding of attacker techniques, detection methodologies, and frameworks such as MITRE ATT&CK, and experience with scripting, automation, or data analysis using Python, PowerShell, SQL, KQL, SPL, or similar technologies.

Requirements

Bachelor's degree in Information Security, Computer Science, Engineering, or related field, or equivalent practical experience
5+ years of experience in cybersecurity, security engineering, detection engineering, security operations, threat hunting, or a related discipline
Experience developing, tuning, or maintaining detections within a SIEM, EDR, log analytics, or security monitoring platform
Experience with scripting, automation, or data analysis using Python, PowerShell, SQL, KQL, SPL, or similar technologies
Strong understanding of attacker techniques, detection methodologies, and frameworks such as MITRE ATT&CK
Strong analytical, problem-solving, communication, and cross-functional collaboration skills

Benefits