Senior Threat Detection Engineer

Detection Engineering: Design, develop, and maintain automated detection logic across SIEM, EDR, and cloud platforms, build and manage SOAR playbooks to enhance Tier 1/2 incident response workflows, conduct detection gap analyses and continuously update rules based on threat intelligence and adversary tactics.

SME Support and Integration: Provide SME support for integrating emerging technologies such as Zero Trust, TIC 3.0, IDS/IPS, SASE, and cloud security tools, monitor, tune, and optimize SIEM search performance, anomaly detection models, and behavioral analytics.

Documentation & Reporting: Develop and maintain SOPs, knowledge base content, FISMA artifacts, and secure configuration documentation, track and report metrics related to detection effectiveness, response time improvements, and workflow efficiencies.