Detection Engineer

Design, develop, and optimize detection use cases for SIEM, EDR, NDR, and XDR platforms.
Create and maintain detection rules, correlation logic, alert tuning, and behavioral analytics.
Map detections to MITRE ATT&CK techniques and adversary tactics.
Analyze logs and telemetry from endpoints, cloud, identity, network, and security tools.
Collaborate with SOC and Incident Response teams to improve detection coverage and reduce false positives.
Conduct threat modeling and identify detection gaps based on emerging threats.
Develop detection-as-code methodologies and automate deployment pipelines where applicable.
Support threat hunting initiatives by creating advanced detection logic.
Integrate threat intelligence feeds into detection mechanisms.
Perform continuous tuning and validation of alerts and detection content.
Show more Show less