CrawlJobs Logo

Senior Detection Engineer

https://www.marriott.com Logo

Marriott Bonvoy

Location Icon

Location:
Singapore , Singapore

Category Icon

Job Type Icon

Contract Type:
Employment contract

Salary Icon

Salary:

Not provided

Job Description:

This is a detection engineering role that leverages knowledge of monitoring, analyzing, detecting, and responding to cyber events and incidents to develop and implement effective monitoring and alerting for information systems and networks. This role is responsible for developing and tuning Security Information and Event Management (SIEM- Splunk) and User Entity and Behavior Analytics (UEBA - Exabeam) content to monitor critical IT infrastructure and application logged events to detect cybersecurity and insider threats across the Marriott enterprise. This role produces high-quality documentation pertaining to detection development, monitoring logic, and other content creation tasks. This role will also lead collaboration sessions for security monitoring use case ideation with partners in the cyber security tower and other business units.

Job Responsibility:

  • Lead collaboration sessions within the cyber security tower and other business units to devise security monitoring use cases
  • engage and collaborate with other security engineers and architects as needed to keep pace with the evolution of corporate infrastructure and applications and share that knowledge with peers as appropriate
  • document prospective security monitoring use cases with MITRE ATT&ACK mappings using standard templates and methodologies
  • inform and consult other cyber ops teams of required data onboarding and integrations for use case development
  • develop analytics, correlation searches, dashboards, reports and alerts within the SIEM and UEBA platforms
  • solicit feedback for pre-production security monitoring content through peer review process and user acceptance testing for tuning
  • document developed security monitoring content in a documentation registry using department standard templates and methodologies
  • manage field mapping and transmission of security monitoring alerts to the security incident response platform for SOC analyst consumption as outlined in process documentation
  • provide governance support for the content development function entailing content development standards compliance, change management approvals for SIEM or UEBA content, and lifecycle management of developed security monitoring content
  • service operational requests in queue such as analytics content performance tuning, filtering, search refinement, parsing issues
  • attend SCRUM and prioritization meetings to review and update deliverables.

Requirements:

  • Bachelor’s degree in Computer Sciences or related field or equivalent experience/certification
  • 3+ years of collective experience in Splunk SIEM (Splunk Enterprise Security) threat detection use case development or UEBA (Exabeam) use case development for insider threat use case development
  • 5+ years of experience in security functions such as SOC, CIRT, security engineering, risk management, vulnerability management or technical infrastructure operations, administration, or systems engineering
  • scripting or programming language, including Python
  • Current information security certification such as Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP) preferred
  • offensive and defensive security certifications such as CEH, IGAC Cyber Defense, OSCP or other related certifications preferred
  • Splunk Certification, including Splunk Enterprise Security Certified Admin preferred
  • use case development experience on the Exabeam platform preferred
  • working knowledge of the NIST Cyber Security Framework and ISO/IEC 27001:2022 preferred
  • working knowledge of the MITRE ATT&CK Framework preferred
  • experience with security monitoring use case ideation for business applications and IT infrastructure preferred
  • familiarity with cloud service provider platforms (AWS, Azure, GCP), identity and access management systems, firewalls, next-gen anti-malware, intrusion detection and prevention systems preferred
  • experience with Linux, Unix and Microsoft operating systems preferred
  • knowledge of IP networking preferred
  • experience with a scripting language (*nix shell scripting, Python, PowerShell, etc.) and regular expressions preferred
  • solid written and verbal communication skills
  • agile methodology.

Nice to have:

  • Current information security certification such as Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP)
  • offensive and defensive security certifications such as CEH, IGAC Cyber Defense, OSCP or other related certifications
  • familiarity with cloud service provider platforms (AWS, Azure, GCP), identity and access management systems, firewalls, next-gen anti-malware, intrusion detection and prevention systems
  • working knowledge of the NIST Cyber Security Framework and ISO/IEC 27001:2022
  • working knowledge of the MITRE ATT&CK Framework
  • experience with security monitoring use case ideation for business applications and IT infrastructure
  • experience with Linux, Unix and Microsoft operating systems
  • knowledge of IP networking
  • experience with a scripting language (*nix shell scripting, Python, PowerShell, etc.) and regular expressions.

Additional Information:

Job Posted:
March 22, 2025

Employment Type:
Fulltime
Work Type:
On-site work
Job Link Share:

Looking for more opportunities? Search for other job offers that match your skills and interests.

Briefcase Icon

Similar Jobs for Senior Detection Engineer

Senior Logging & Detection Engineer

We are currently seeking a Senior Logging & Detection Engineer to lead the techn...
Location
Location
Canada , Vancouver; Calgary; Toronto
Salary
Salary:
146200.00 - 197800.00 CAD / Year
clio.com Logo
Clio
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Senior-level expertise building and scaling enterprise-grade detection capabilities and security monitoring systems
  • Expert-level query language proficiency in at least two of the following: Elasticsearch/Lucene, SQL, KQL (Kusto), or SPL (Splunk), demonstrating advanced optimization techniques
  • Extensive Detection Engineering experience owning the full lifecycle of rules, alerts, and automated response workflows within a SIEM/SOAR environment
  • Advanced log analysis skills across diverse, large-scale data sources, including multi-cloud logs (AWS, Azure, GCP), network flows, and advanced security tool outputs
  • Deep dashboard and visualization expertise with tools like Kibana, Grafana, or Tableau, specifically for security metrics and executive reporting
  • Proven expertise in leading threat hunting efforts using log data to proactively identify and track sophisticated threats and anomalous behavior across the environment
  • Senior-level scripting and automation abilities (Python/Go/PowerShell), used to build custom tools, manage APIs, and drive detection automation at scale
  • Architectural experience integrating and optimizing SIEM platforms, SOAR tools, and security orchestration systems
  • Expert performance optimization skills covering query tuning, index design, data partitioning, and overall resource-efficient analytics on big data
  • Significant incident response experience providing expert-level technical analysis and forensic support during major security incidents
Job Responsibility
Job Responsibility
  • Lead the design and implementation of sophisticated, production-ready detection rules and queries across the ELK stack, security data lakes, and multi-cloud logging platforms
  • Architect and optimize complex search queries, aggregations, and analytics dashboards for high-velocity security monitoring, focusing on performance and cost efficiency
  • Design and build automated detection and response workflows (SOAR), ensuring seamless and reliable integration with critical incident response systems
  • Serve as the primary liaison with the threat intelligence team, developing and owning the framework to translate intelligence into scalable, actionable detection capabilities (e.g., MITRE ATT&CK coverage)
  • Establish and maintain a robust detection rule library, query templates, and lead the creation of security analytics playbooks for the wider team
  • Drive performance optimization and resource utilization strategies across petabyte-scale log datasets, including index design and data tiering
  • Develop and standardize custom visualizations, dashboards, and executive reporting capabilities for security stakeholders
  • Lead complex threat hunting operations, mentor junior team members on investigative techniques, and proactively refine detection logic to achieve near-zero false positive rates
  • Collaborate closely with the platform team to define the logging architecture roadmap based on future detection requirements and security observability goals
  • Proactively research emerging threats and attack patterns, translating novel techniques into strategic, forward-looking detection logic and advising security leadership
What we offer
What we offer
  • Top-tier health benefits, dental, and vision insurance
  • Hybrid work environment
  • Flexible time off policy, with an encouraged 20 days off per year
  • $2000 annual counseling benefit
  • RRSP matching and RESP contribution
  • Clioversary recognition program with special acknowledgement at 3, 5, 7, and 10 years
  • Fulltime
Read More
Arrow Right

Senior Threat Detection Engineer

We’re expanding our Threat Detection Engineering team at Atlassian and looking f...
Location
Location
United States , San Francisco
Salary
Salary:
146300.00 - 235000.00 USD / Year
https://www.atlassian.com Logo
Atlassian
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Bachelor's degree in Computer Science, Information Security, or a related field
  • Minimum 3 years experience in Detection Engineering roles
  • Experience building advanced data analytics and ML based detection models to identify complex threats
  • Experience building effective detection capabilities to modern cloud environments
  • Experience using common programming languages to build automation
  • Experience identifying threats through proactive threat hunting
  • Experience using security detection technologies and systems, including firewalls, intrusion detection systems, EDR, and authentication systems
  • Experience successfully delivering complex projects
  • Strong analytical skills and the ability to effectively identify and resolve problems
Job Responsibility
Job Responsibility
  • Develop advanced threat detection mechanisms using complex data analytics and machine learning models that can effectively identify and raise alerts for any adversarial or high-risk behaviors within the Atlassian’s systems
  • Continuous improvement and fine-tuning of detection systems to effectively adapt to new and emerging cyber threats
  • Monitor and enhance critical detection systems to ensure their reliability and effectiveness in delivering robust detection capabilities
  • Deploy new detection technologies to continuously uplift and improve our detection capabilities
  • Collaborate with partner teams such as Incident Response and Threat Intelligence is to establish and maintain meaningful security alerts
  • Work closely with these teams to ensure security alerts are relevant, actionable, and aligned with the overall security strategy
  • Collaborate closely with Product Engineering, Data Platform, and Security Engineering teams to advance our detection coverage and tooling in our production cloud environments
  • Automate complex security operational tasks, aiming to streamline and optimize routine security activities
  • Develop tools, systems, and programs to enhance and fortify Atlassian's overall security posture
  • Remain informed about the latest security trends, emerging threats, and evolving technologies to ensure that Atlassian is well-prepared to adapt to new security challenges
What we offer
What we offer
  • health and wellbeing resources
  • paid volunteer days
  • Fulltime
Read More
Arrow Right

Senior Backend Engineer-Detection Team

Cortex is expanding. We have the pace of a startup and the resources of the worl...
Location
Location
Israel , Tel Aviv
Salary
Salary:
Not provided
paloaltonetworks.com Logo
Palo Alto Networks
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 5+ years experience as an hand-on software development engineer
  • 5+ years of experience in designing, building and maintaining scalable cloud server-side applications
  • Experience with SQL or at least 1 leading RDBMS
  • Experience with Kubernetes/Docker
Job Responsibility
Job Responsibility
  • Develop a product that will apply the power of the Cortex Platform to solve the challenges of cloud security, with a focus on Data Analytics and Threat Detection
  • Apply your knowledge and experience of cloud development and cybersecurity to design and build and integrate new capabilities into our platform
What we offer
What we offer
  • FLEXBenefits wellbeing spending account with over 1,000 eligible items
  • mental and financial health resources
  • personalized learning opportunities
Read More
Arrow Right

Senior Engineer, Equipment Engineering

Sandisk understands how people and businesses consume data and we relentlessly i...
Location
Location
Malaysia , Batu Kawan
Salary
Salary:
Not provided
sandisk.com Logo
Sandisk
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Bachelor of Engineering (Hons) in Electrical / Electronics/ Mechanical / Mechatronic
  • 3+ years of experience in test equipment engineering, specifically in SSD manufacturing or a related industry, with a strong emphasis on sustaining and maintenance
  • Proven track record of maintaining high slot-on availability and first pass yield in a high-volume production environment
  • Experience in utilizing data analytics for equipment monitoring, troubleshooting, and maintenance optimization
  • Expertise in maintaining and troubleshooting SSD test equipment, with a deep understanding of calibration, reliability, and maintenance protocols
  • Proficiency in data analysis tools (e.g., Python, R, SQL, MATLAB) for monitoring and optimizing equipment performance
  • Strong knowledge of predictive maintenance techniques, including AI-driven approaches to equipment reliability
  • Familiarity with SPC, DOE, and Six Sigma methodologies for continuous improvement
  • Strong leadership skills with the ability to mentor and guide junior engineers and technicians
  • Excellent problem-solving and decision-making abilities, with a focus on data-driven solutions
Job Responsibility
Job Responsibility
  • Ensure that test equipment is functioning optimally, achieving >99.3% slot-on availability and maintaining a high first pass yield
  • Perform routine maintenance, calibration, and troubleshooting of test systems to minimize downtime and ensure high reliability
  • Monitor real-time and historical data to detect issues, reduce failures, and maximize equipment uptime
  • Use data analytics to monitor test equipment performance, identify patterns, and anticipate potential issues before they impact production
  • Analyze test equipment data to improve test efficiency, reduce down times, and enhance tester performance
  • Implement real-time monitoring and diagnostic tools to ensure sustained optimal performance of test equipment
  • Analyze equipment performance data to optimize maintenance schedules and extend the life cycle of test equipment
  • Lead continuous improvement projects focused on sustaining and enhancing the efficiency and reliability of test equipment
  • Lead and mentor a team of engineers and technicians in sustaining tester, sharing best practices for maintenance and troubleshooting
  • Work closely with production, quality, and other cross-functional teams to ensure seamless operation and continuous improvement in testing
  • Fulltime
Read More
Arrow Right

Senior Data Engineer

Atlassian is looking for a Senior Data Engineer to join our Go-To Market Data En...
Location
Location
India , Bengaluru
Salary
Salary:
Not provided
https://www.atlassian.com Logo
Atlassian
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • A BS in Computer Science or equivalent experience
  • At least 5+ years professional experience as a Sr. Software Engineer or Sr. Data Engineer
  • Strong programming skills (Python, Java or Scala preferred)
  • Experience writing SQL, structuring data, and data storage practices
  • Experience with data modeling
  • Knowledge of data warehousing concepts
  • Experience building data pipelines, platforms, micro services, and REST APIs
  • Experience with Spark, Hive, Airflow and other streaming technologies to process incredible volumes of streaming data
  • Experience in modern software development practices (Agile, TDD, CICD)
  • Strong focus on data quality and experience with internal/external tools/frameworks to automatically detect data issues, anomalies
Job Responsibility
Job Responsibility
  • Help our stakeholder teams ingest data faster into our data lake
  • Make our data pipelines more efficient
  • Build micro-services
  • Architect, design, and enable self-serve capabilities at scale
  • Apply your strong technical experience building highly reliable services
  • Manage and orchestrate a multi-petabyte scale data lake
  • Transform vague requirements into solid solutions
  • Solve challenging problems creatively
What we offer
What we offer
  • Health coverage
  • Paid volunteer days
  • Wellness resources
  • Fulltime
Read More
Arrow Right

Senior Distributed Systems Engineer - Platform Engineering

For our Platform Engineering team, we are looking for programmers with strong in...
Location
Location
Poland
Salary
Salary:
Not provided
rtbhouse.com Logo
RTB House
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Excellent understanding of how complex IT systems work - from the hardware level, through software, to algorithms
  • Ability to proactively define requirements, ask appropriate questions and draw conclusions that will combine technical constraints and business needs
  • Ability to lead the design and implementation of a solution
  • Experience in leading project teams
  • Willingness to be involved in topics that go beyond programming and design, such as responsibility for technical areas or communication with other teams
  • Proactive attitude, independence in taking action
  • Extensive experience in programming and readiness to implement key system elements as well as involvement in code reviews
  • Good knowledge of methods of creating concurrent programs and distributed systems
  • Ability to critically analyze created solutions in terms of performance (from estimating the theoretical performance of designed systems to detecting and removing actual performance problems in production)
  • C1 level in English and Polish
Job Responsibility
Job Responsibility
  • Plan and then hands-on lead further development within a given technical area like deployment, monitoring, databases or load balancing, in the context of existing infrastructure within RTB House
  • Coordinate the work of a project team of 3-4 people, also making arrangements with other teams and units within RTB House
  • Ensure the reliability and scalability of the solutions built
What we offer
What we offer
  • Attractive compensation
  • Work in a team of enthusiasts who are willing to share their knowledge and experience
  • Flexible cooperation conditions - we do not have core hours, we do not have holiday limits
  • Access to the latest technologies and the possibility of real use of them in a large-scale and highly dynamic project
Read More
Arrow Right

Senior Engineering Manager - Risk

Our mission is to build the intelligent, automated systems and operational tools...
Location
Location
United States; Canada , San Francisco; New York; Portland
Salary
Salary:
239000.00 - 298800.00 USD / Year
mercury.com Logo
Mercury
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 9+ years of software development experience
  • 3–5+ years of engineering management in a high-scale tech environment
  • AI/ML expertise—you’ve built and launched applied AI products (from LLMs to traditional ML models), shipping them from 0→1 and scaling 1→10 in production environments
  • Proven success building large-scale backend distributed systems, ideally involving integrations and decision automation
  • Experience with or curiosity about KYC, AML, risk, or compliance systems in financial services or fintech
  • A track record of raising the bar for quality and reliability, balancing shipping speed with technical excellence
  • Strong communication and leadership skills—you can inspire engineers, partner across functions, and adapt your management style to the moment
  • The ability to hire, retain, and develop exceptional technical talent
  • A pragmatic builder’s mindset: you believe beautiful systems are those that work, adapt, and last
Job Responsibility
Job Responsibility
  • Lead teams (4–8 engineers each) responsible for account onboarding, KYC/KYB, AML, and fraud detection decisioning and workflows, and operational tooling
  • Apply AI/ML—from traditional models to large language models—to unlock faster, real-time bank account application approvals. This work sits on the critical business path, directly driving efficiency and revenue growth
  • Partner with Product, Risk, and Data teams to design and deliver scalable systems that balance user experience with compliance rigor
  • Shape the next generation of our KYC and risk platforms—reliable, resilient, and easy to extend as regulations and business needs evolve
  • Create a strong culture of operational excellence, with measurable improvements to uptime, accuracy, and system quality
  • Build, mentor, and grow engineering talent
  • help managers and senior engineers level up technically and organizationally
  • Drive clarity amid complexity: translating between regulatory nuance and technical execution
  • Foster collaboration across teams to align on priorities, simplify interfaces, and make the whole system more maintainable and elegant
What we offer
What we offer
  • base salary
  • equity
  • benefits
  • Fulltime
Read More
Arrow Right

Senior Production Engineer - Application Support Lead - Futures Engineering

Senior Application Support Lead to oversee the support operations for our enterp...
Location
Location
United States , Chicago
Salary
Salary:
155000.00 - 185000.00 USD / Year
clearstreet.io Logo
Clear Street
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 5–8 years of experience in application support
  • At least 2 years in a leadership or senior technical role, ideally in financial services or fintech
  • Knowledge of Java and ReactJS, with experience debugging and analyzing application logs
  • Hands-on experience with Kubernetes and Docker for deployment troubleshooting
  • Familiarity with monitoring tools (e.g., Datadog) and services such as Pager Duty
  • Experience with ticketing systems (e.g., Jira)
  • Deep understanding of cleared derivatives, futures, or back-office operations in financial markets
  • Proven ability to lead and motivate a support team
  • Strong decision-making and problem-solving skills in high-pressure environments
  • Excellent communication and interpersonal skills
Job Responsibility
Job Responsibility
  • Provide advanced troubleshooting for complex application issues, including Java/ReactJS code-level analysis, database queries, and Kubernetes/Docker environment diagnostics
  • Manage a team of application support analysts, providing mentorship, training, and performance evaluations
  • Oversee the triage, prioritization, and resolution of support tickets, ensuring SLAs are met
  • Lead complex configuration tasks, such as system integrations, and custom module deployments
  • Act as the primary point of escalation for major incidents, coordinating with infrastructure, development, and client teams
  • Develop and implement support processes, including automated monitoring, knowledge base enhancements, and proactive issue detection
  • Liaise with clients, product managers, and senior leadership to provide updates on support metrics, system performance, and improvement initiatives
  • Utilize advanced monitoring tools to proactively identify performance bottlenecks and coordinate with DevOps to optimize Kubernetes/Docker deployments
  • Create and maintain comprehensive technical documentation and deliver training to support staff and end-users
  • Contribute to the roadmap for support operations, aligning with business goals and client needs
What we offer
What we offer
  • Competitive compensation packages
  • Company equity
  • 401k matching
  • Gender neutral parental leave
  • Full medical, dental and vision insurance
  • Lunch stipends
  • Fully stocked kitchens
  • Happy hours
  • Fulltime
Read More
Arrow Right