Senior SIEM Detection Engineer Job at Dutech Systems (Austin)

Senior Cyber Detection Engineer (SIEM)

Zachary Piper Solutions is seeking a Senior Cyber Detection Engineer (SIEM) to s...

Location

United States , Springfield

Salary:

135000.00 - 150000.00 USD / Year

Piper Companies

Expiration Date

Until further notice

Requirements

Active TS/SCI CI Polygraph required
Bachelor’s degree from an accredited college in a related discipline and 5+ years of prior relevant experience
IAT Level II (GSEC, Security+, SSCP, or CCNA-Security) certification required
Proficient in modern operating systems, including Windows, UNIX, network OS environments, databases, and virtualized computing platforms
Experienced with enterprise-grade security tools, such as Security Information and Event Management (SIEM) systems specifically Splunk, Threat Intelligence Platforms (TIPs), and network monitoring solutions
Skilled in developing, modifying, and fine-tuning detection mechanisms, including IDS signatures and SIEM correlation rules
Knowledgeable in implementing cybersecurity countermeasures and mitigation strategies to reduce risk and enhance system resilience

Job Responsibility

Support Cyber Operations Squadron (COS) efforts by ensuring timely publication of updated cybersecurity tool signatures, including antivirus and host-based security systems
Conduct in-depth threat analysis, including reverse engineering of malware, to uncover critical details such as origin, target, impacted systems, recommended mitigations, and mission risk
Develop custom content for Security Information and Event Management (SIEM) tools and create tailored IDS/IPS signatures to counter specific threats
Correlate security events and incidents using data from diverse enterprise sources to identify patterns and potential threats
Assess the impact of cyber incidents on data and infrastructure, providing detailed evaluations of damage and recovery needs
Perform trend analysis and reporting on cyber incidents to identify recurring threats and inform proactive defense strategies
Analyze network traffic and system data to detect anomalies and potential security threats
Deliver real-time detection, identification, and reporting of cyber intrusions, suspicious activities, and policy violations
Create and implement detection rules

What we offer

Full Benefits: PTO
11 Paid Holidays
Cigna Medical, Dental, and Vision
401k with ADP
Certification reimbursement
Contract mobility and job stability – Contract through 2026

Fulltime

Detection Engineer, Senior

We’re looking for a self‑motivated, hands‑on self‑starter who thrives in environ...

Location

United States , Fort Meade

Salary:

77600.00 - 176000.00 USD / Year

Booz Allen Hamilton

Expiration Date

Until further notice

Requirements

5+ years of experience in a security engineering function, such as detection engineering, SOC analytics, or threat hunting
Experience contributing to shared rule and detection repositories
Experience authoring detections in two or more of the following: Sigma, YARA, Suricata, Splunk SPL, KQL, or SQL/DB‑SQL
Experience applying Detection‑as‑Code (DaC) best practices, such as Git workflows, pull requests, automated linting, CI pipelines, unit tests, and metadata enforcement
Experience with detection versioning, semantic versioning, changelogs, and ruleset lifecycle management
Experience building detections across multiple log sources and platforms, such as EDR/XDR, SIEM, cloud telemetry, and identity providers
Ability to demonstrate map detections to MITRE ATT&CK techniques and communicate coverage effectively to stakeholders
Ability to communicate detection logic clearly, document rationale, and collaborate with SOC, IR, and engineering partners
Ability to obtain a Secret clearance
HS diploma or GED

Job Responsibility

Design, build, test, and maintain production‑grade detections across diverse data sources—endpoint, network, identity, SaaS, and cloud—while applying Detection‑as‑Code (DaC) practices to ensure consistency, scalability, versioning, and automation
Collaborate closely with incident responders, hunters, and platform engineers to map rules to MITRE ATT&CK, maintain coverage dashboards, and continuously iterate on fidelity and performance

What we offer

Health, life, disability, financial, and retirement benefits
Paid leave
Professional development
Tuition assistance
Work-life programs
Dependent care
Recognition awards program

Senior Detection & Response Engineer

Activision is seeking a Senior Detection and Response Engineer to help protect o...

Location

United States of America , Playa Vista

Salary:

101000.00 - 186754.00 USD / Year

Activision

Expiration Date

Until further notice

Requirements

Bachelor’s degree in computer science, Information Security, or equivalent practical experience
5+ years of progressively accountable experience
Hands‑on experience in threat detection, security operations, and incident response
Strong understanding of the modern threat landscape, attacker tactics, techniques, and procedures
Proven ability to detect, triage, investigate, and respond to security incidents in enterprise environments
Experience performing detailed log analysis, correlation, and investigative triage
Strong written and verbal communication skills
Ability to work independently and collaboratively
Willingness to participate in an on‑call rotation and provide off‑hours support
Fluency in English

Job Responsibility

Detect, investigate, and respond to security incidents across cloud, corporate, and production environments
Monitor and analyze security telemetry and audit logs to identify anomalous activity
Perform alert triage, in‑depth investigation, and forensic analysis across the full incident lifecycle
Execute endpoint, identity, cloud, and malware investigations
Develop, refine, and tune threat detections within the SIEM
Enhance investigation and response efficiency through automation, SOAR workflows, scripting, and advanced analytics
Contribute to TDIR procedures, playbooks, runbooks, documentation, and operational metrics
Collaborate closely with engineering teams, business stakeholders, and vendors
Participate in an on‑call rotation and provide off‑hours support
Communicate investigation findings clearly and effectively

What we offer

Medical, dental, vision, health savings account or health reimbursement account, healthcare spending accounts, dependent care spending accounts, life and AD&D insurance, disability insurance
401(k) with Company match, tuition reimbursement, charitable donation matching
Paid holidays and vacation, paid sick time, floating holidays, compassion and bereavement leaves, parental leave
Mental health & wellbeing programs, fitness programs, free and discounted games, and a variety of other voluntary benefit programs like supplemental life & disability, legal service, ID protection, rental insurance, and others
Relocation assistance if required to move

Fulltime

Senior Security Engineer, Detection and Response

As a Senior Security Engineer on the Detection & Response team, you will play a ...

Location

United States; Canada

Salary:

156000.00 - 210000.00 USD; CAD / Year

1Password

Expiration Date

Until further notice

Requirements

5+ years of experience in security technical engineering roles
3+ years focused on security operations, detection engineering or incident response
Hands-on experience with detection engineering and automation, including SIEMs, SOAR platforms, behavior analytics, and Detection-as-Code workflows
Strong understanding of modern attacker techniques and how they apply to cloud-native, SaaS, and identity-centric environments
Experience with endpoint, runtime, and forensic tools across multiple operating systems
Knowledge of cloud environments (e.g., AWS, GCP) and security best practices for cloud-native systems
Proficiency with scripting and infrastructure tools (e.g., Python, Bash, Terraform, CI/CD pipelines) to support automation and internal tooling
Strong written and verbal communication skills, with the ability to explain complex security issues to both technical and non-technical audiences

Job Responsibility

Design, build, and continuously improve threat detections across 1Password’s infrastructure, products, internal tools, and corporate environments
Lead and support security incident response activities, including investigation, containment, remediation, and post-incident learning
Apply threat intelligence and knowledge of attacker TTPs to detection development, threat hunting, alert triage, and response prioritization
Collaborate with Security, Infrastructure, and IT teams to improve security visibility, logging quality, and response readiness
Use automation, scripting, and Detection-as-Code practices to scale detection and response workflows and improve reliability
Own end-to-end security projects aligned with Detection & Response initiatives and broader security strategy
Participate in a shared on-call rotation and support high-severity incidents as needed
Contribute to operational maturity through playbooks, mentoring, tabletop exercises, audits, and cross-functional initiatives

What we offer

Health benefits
Dental benefits
401k
RRSP
Generous PTO
Equity grant
Incentive programs
Maternity and parental leave top-up programs
RSU program for most employees
Retirement matching program

Fulltime

Senior Logging & Detection Engineer

We are currently seeking a Senior Logging & Detection Engineer to lead the techn...

Location

Canada , Vancouver; Calgary; Toronto

Salary:

146200.00 - 197800.00 CAD / Year

Clio

Expiration Date

Until further notice

Requirements

Senior-level expertise building and scaling enterprise-grade detection capabilities and security monitoring systems
Expert-level query language proficiency in at least two of the following: Elasticsearch/Lucene, SQL, KQL (Kusto), or SPL (Splunk), demonstrating advanced optimization techniques
Extensive Detection Engineering experience owning the full lifecycle of rules, alerts, and automated response workflows within a SIEM/SOAR environment
Advanced log analysis skills across diverse, large-scale data sources, including multi-cloud logs (AWS, Azure, GCP), network flows, and advanced security tool outputs
Deep dashboard and visualization expertise with tools like Kibana, Grafana, or Tableau, specifically for security metrics and executive reporting
Proven expertise in leading threat hunting efforts using log data to proactively identify and track sophisticated threats and anomalous behavior across the environment
Senior-level scripting and automation abilities (Python/Go/PowerShell), used to build custom tools, manage APIs, and drive detection automation at scale
Architectural experience integrating and optimizing SIEM platforms, SOAR tools, and security orchestration systems
Expert performance optimization skills covering query tuning, index design, data partitioning, and overall resource-efficient analytics on big data
Significant incident response experience providing expert-level technical analysis and forensic support during major security incidents

Job Responsibility

Lead the design and implementation of sophisticated, production-ready detection rules and queries across the ELK stack, security data lakes, and multi-cloud logging platforms
Architect and optimize complex search queries, aggregations, and analytics dashboards for high-velocity security monitoring, focusing on performance and cost efficiency
Design and build automated detection and response workflows (SOAR), ensuring seamless and reliable integration with critical incident response systems
Serve as the primary liaison with the threat intelligence team, developing and owning the framework to translate intelligence into scalable, actionable detection capabilities (e.g., MITRE ATT&CK coverage)
Establish and maintain a robust detection rule library, query templates, and lead the creation of security analytics playbooks for the wider team
Drive performance optimization and resource utilization strategies across petabyte-scale log datasets, including index design and data tiering
Develop and standardize custom visualizations, dashboards, and executive reporting capabilities for security stakeholders
Lead complex threat hunting operations, mentor junior team members on investigative techniques, and proactively refine detection logic to achieve near-zero false positive rates
Collaborate closely with the platform team to define the logging architecture roadmap based on future detection requirements and security observability goals
Proactively research emerging threats and attack patterns, translating novel techniques into strategic, forward-looking detection logic and advising security leadership

What we offer

Top-tier health benefits, dental, and vision insurance
Hybrid work environment
Flexible time off policy, with an encouraged 20 days off per year
$2000 annual counseling benefit
RRSP matching and RESP contribution
Clioversary recognition program with special acknowledgement at 3, 5, 7, and 10 years

Fulltime

Senior Detection and Response Engineer

We are looking for a Senior Detection and Response Engineer to help protect the ...

Location

Spain , Barcelona

Salary:

Not provided

Activision

Expiration Date

Until further notice

Requirements

BS in computer science or related field or equivalent experience
Extensive experience in security operations, threat detection engineering or incident response
Experience using AI/ML techniques in security operations (alert enrichment, behavioral analytics, anomaly detection, automated investigations)
Strong understanding of the modern threat landscape, common tactics and attacker techniques
Experience working with security monitoring platforms (SIEM, EDR or similar)
Scripting or programming skills (Python, PowerShell or similar) to automate security workflows
Strong written and verbal communication skills, and an ability to collaborate across teams
Fluent in English
Experience implementing or operating SOAR platforms
Must be willing to participate in the on-call rotation

Job Responsibility

Detect, investigate and respond to security incidents across cloud, corporate and production environments
Design and improve detection capabilities and incident response workflows
Develop automation through SOAR platforms and scripting
Enhance alert triage and investigations using AI/ML-driven security analytics
Collaborate with engineering teams to improve security visibility and response capabilities
Share knowledge through internal documentation, playbooks and team collaboration
Participate in an on-call rotation for incident response

Senior Detection and Response Engineer

The Senior Detection and Response Engineer is a critical technical role responsi...

Location

United States

Salary:

128000.00 - 161000.00 USD / Year

AlphaSense

Expiration Date

Until further notice

Requirements

7+ years in security operations with 3+ years in detection engineering, including deep expertise in creating high-fidelity rules (SIGMA, YARA-L, KQL, SPL)
Proven track record of building detection strategies across SIEM, EDR, and Cloud platforms, grounded in the MITRE ATT&CK framework
Expert knowledge of SOAR platforms (e.g., Tines, Splunk SOAR, Cortex XSOAR), architecture, and complex playbook development
Proven experience designing and implementing SOAR platform architecture from concept to production
Advanced scripting and automation development skills in Python (required) for API integrations and security tool orchestration
Strong background in threat hunting methodology, hypothesis development, and campaign execution, with experience leading or co-leading hunting programs
Proficiency with data analysis, anomaly detection, and hands-on experience with hunting tools like Jupyter Notebooks, Osquery, and Velociraptor
Deep understanding of attack techniques, lateral movement, persistence mechanisms, and post-exploitation TTPs across Windows, Linux, and macOS
Familiarity with security frameworks including MITRE ATT&CK, PICERL, NIST CSF, and Detection Maturity Models, and incident response best practices
Proven ability to lead technical initiatives, mentor team members, and communicate complex technical concepts to diverse audiences

Job Responsibility

Design, implement, and maintain advanced detection rules and correlation logic across SIEM , EDR, and Cloud platforms (AWS, GCP)
Lead detection strategy and architecture aligned with the Detection Quality frameworks
Write high-fidelity detection rules using languages like SIGMA and YARA-L
Conduct deep log source analysis, perform threat modeling, adversary emulation, and maintain MITRE ATT&CK mapping coverage
Conduct detection gap analysis to identify coverage opportunities across the kill chain
Create and maintain detection playbooks, runbooks, and comprehensive documentation
Perform detection quality assessments and continuous improvement initiatives
Develop complex automated response playbooks for multi-stage incidents spanning multiple security tools
Integrate security tools via APIs (SIEM, EDR, MDM, CASB, ITSM, threat intelligence platforms)
Create automated enrichment pipelines incorporating threat intelligence, asset context, and user behavior analytics

What we offer

performance-based bonus
equity
a generous benefits program

Fulltime

Senior Security Detection and Monitoring Engineer

As a driven and proactive Senior Security Detection and Monitoring Engineer you ...

Location

Netherlands , Amsterdam

Salary:

Not provided

Adyen

Expiration Date

Until further notice

Requirements

6+ years of experience in one or more of the following security domains: Intrusion Detection, Detection Engineering, Threat Detection, Incident Response
Proficient in two or more of the following areas: Operating System security (Linux/MacOS), Container Security, Network security, SaaS/IaaS Security
Understand security detection and monitoring without being limited to specific SIEM tools or vendors
Solid and demonstrable experience with Python, and are able to translate complex detection logic into advanced code with ease
Builder at heart, and have the mindset to script, automate, and scope projects to avoid repetitive tasks
Believe that the security of systems, people and processes requires a pragmatic and humane approach where communication is key
Have pioneered a solution in uncharted territory, setting a new standard for your team

Job Responsibility

Create scalable and actionable detection logic for emerging threats in Python
Develop new solutions to hunt, detect and deal with threats
Operate and expand our in-house built security event monitoring tool
Save your colleague’s time and brainpower through automation
Maintain up to date knowledge of tools, techniques, and procedures used by attackers
Bring and execute on state-of-the-art initiatives that help this domain be ahead of the market
Build and own security monitoring tooling in Adyen
Join the Security On Call group rotation

Select Country

Senior SIEM Detection Engineer

Job Description

Job Responsibility

Requirements

Nice to have

Looking for more opportunities?