Detection Engineer

Essential Functions:

• Design, develop, tune, and maintain high-fidelity detection logic across SIEM, EDR, NDR, and cloud platforms, applying detection-as-code principles and mapping to MITRE ATT&CK.
• Manage signal-to-noise ratio through iterative rule refinement and threshold calibration to maximize automated fidelity.

SOAR & Automation:

• Build automated response playbooks and enrichment workflows using SOAR platforms to triage and respond without manual intervention.
• Integrate SOAR with various systems via APIs and build tooling to accelerate detection pipeline development.

On-Call & Incident Response:

• Participate in a rotating on-call schedule to triage alerts, assess events, and perform tuning to maintain alert fidelity.
• Serve as an escalation point for complex incidents and conduct hypothesis-driven threat hunts using behavioral analytics.