Detection Engineer

Job Summary

To enhance security measures, the full-time Detection Engineer will design, build, and tune detection rules using Splunk, CrowdStrike, and AWS security automation while working remotely.

Key responsibilities

• Design and implement detection rules and correlation logic across multiple platforms, focusing on reducing false positives
• Develop and maintain API- and Lambda-based orchestration pipelines for alert routing into ServiceNow Security Incident Response (SIR)
• Collaborate with incident responders to identify gaps in investigations and translate them into refined detection logic

Required qualifications

• 4-7 years of security engineering or detection engineering experience, including multi-platform detection work
• Hands-on experience with Splunk (SPL) and CrowdStrike NG-SIEM/LogScale (CQL)
• Proficiency in scripting, preferably in Python, for automation and API integration
• Familiarity with MITRE ATT&CK framework and its application in detection logic
• Experience with cloud security monitoring across AWS, Azure, or GCP