Threat Detection Engineer

Job Summary

Experienced cybersecurity professionals will find a remote Threat Detection Engineer position focused on proactive threat hunting, incident investigation, and leveraging security tools to enhance the organization's security posture during PST business hours.

Key responsibilities

• Conduct proactive threat hunting and investigations related to insider threats and suspicious user behavior
• Design, develop, test, deploy, and tune advanced Splunk detections and correlation searches
• Produce detailed investigative reports and actionable recommendations to support security operations

Required qualifications

• 8+ years of experience in digital threat investigations and forensic investigations
• Advanced hands-on experience with Splunk Enterprise Security and writing complex SPL queries
• Strong experience with Risk-Based Alerting (RBA) and User and Entity Behavior Analytics (UEBA)
• Proven ability to translate threat intelligence and MITRE ATT&CK techniques into operational detections