The work:

The Threat Detection Engineer Lead is a critical role within the cybersecurity team, responsible for identifying, analyzing, and mitigating potential cyber threats to the organization's information systems. This position requires an expert-level understanding of threat detection methodologies, advanced security monitoring tools, and incident response processes. The Threat Detection Engineer will work closely with other cybersecurity professionals to enhance the organization's security posture and ensure the protection of sensitive data. This role also solutions and implements defensive technologies across multiple domains, including Content Development, SIEM Tuning, and other advanced threat detection and response capabilities.

Here's what you need:

• 10 years of experience in IT and/or Cyber
• Bachelor’s Degree required
• Experience with threat detection engineering and tuning
• Scripting experience with one or more of the following languages: Python , Yara, Sigma, SPL (Splunk Querly language), Phantom
• Splunk engineering experience
• Active Top Secret clearance or prior Sensitive Compartmented Information (SCI) access is required

Bonus points if you have:

• Experience with using one or more of the following tools: Microsoft, Sentinel, Cribl, Endgame, Carbon Black, Tanium, FireEye, RSA Archer, Palo Alto, Checkpoint, McAfee, Encase, Security Onion, Snort, ELK
• Certifications:
• Certified Ethical Hacker
• SANS GIAC Certifications (GCTI, GCIH, GCIA etc.)
• DFIR related Certifications