Detection Engineer

Required

• U.S. Citizenship required
• Bachelor’s degree in Cybersecurity, Computer Science, or related field (or equivalent experience)
• 6 + years experience in information security or equivalent combination of education and work experience
• 2+ years experience performing event and log analysis across enterprise security tools (AV, IDS/IPS, Firewalls, Active Directory, Web Proxies, DLP, SIEM)
• Hands-on experience with:
• Microsoft Sentinel & KQL (minimum 1 year)
• Cisco FirePower and IDS/IPS configuration (minimum 1 year)
• SIEM platforms (Sentinel preferred)
• Detection engineering: designing and tuning signatures for IoCs and IoAs
• Packet and malware analysis using tools like Wireshark
• Git and GitHub for detection code version control and collaborative workflows
• Scripting and parsing (regex, PowerShell, Python, grep, sed, awk)