Detection Engineer, Falcon Complete
New
J
JobgetherCybersecurity
Based in the United StatesFull-TimeMiddle
SalaryAnnual base salary ranging from $100,000 to $150,000
Apply NowOpens the employer's application page
Job Details
- Experience
- At least 3 years of professional experience
- Required Skills
- PythonCI/CD
Requirements
- At least 3 years of professional experience as a Detection Engineer, Security Engineer, Security Analyst, Threat Intelligence Analyst, or in a closely related cybersecurity role.
- Strong understanding of current cybersecurity threats, adversary behaviors, attack techniques, and SIEM-based detection methods.
- Practical experience developing, maintaining, or optimizing security detection rules and analyzing security events.
- Experience working with large datasets from multiple vendors, platforms, and security technologies.
- Hands-on familiarity with SIEM solutions such as LogScale, Splunk, Sumo Logic, Microsoft Sentinel, IBM QRadar, or LogRhythm.
- Strong analytical and investigative skills, including identifying threat patterns and translating findings into actionable detection logic.
- Experience with Python or other scripting languages for automation, data processing, and security engineering is preferred.
- Familiarity with LLMs, AI-powered development tools, and AI coding agents; experience building or integrating AI-assisted workflows is an advantage.
- Knowledge of software development practices, including code reviews, testing, version control, and CI/CD methodologies.
- Relevant cybersecurity certifications such as GCFA, GCDA, or GCIH are desirable.
Responsibilities
- Conduct threat research and proactive threat hunting to identify emerging adversary tactics, techniques, and procedures.
- Develop, test, deploy, and maintain high-fidelity detection rules for a Next-Generation SIEM platform.
- Respond to emerging threats by creating and improving detection coverage.
- Analyze security events and large datasets across third-party technologies and data sources to identify suspicious activity and detection gaps.
- Review, validate, and test detection rules for quality, accuracy, reliability, and performance.
- Apply CI/CD practices to manage and deploy detection rules as code.
- Use LLMs, AI coding agents, and automation tools to accelerate threat research, rule development, and operational workflows.
- Collaborate with SIEM architects and engineering teams on data ingestion, parsing, and normalization using common event schemas.
- Build and maintain internal utilities, tools, and automation solutions for managed security teams.
- Maintain technical documentation and operational processes, and participate in a Detection Engineer on-call rotation.
View Full Description & ApplyYou'll be redirected to the employer's site
