Advanced Defensive Detection Engineer
Quincy, Massachusetts, United States
USD 120K-202K Mid-level Full Time
Tasks
- Advise on alert creation across security controls
- Align detection strategy with MITRE ATT&CK framework
- Collaborate to maintain IT process and configuration library
- Develop implement detection rules for applications cloud and on premises
- Develop testing and document detection capabilities
- Document and maintain assets scripts and processes for SIEM and EDR testing
- Implement automated detection rule metrics
- Interpret threat models research TTPs
- Monitor maintain and refresh SIEM lookup tables
- Partner with purple team and security teams to validate detection goals
- Test and tune detection rules in SIEM and EDR
- Triage prioritize and enhance detection rule requests
- Validate and document detection requirements search criteria and test cases
Perks/Benefits
Skills/Tech-stack
API Design | Alert triage | Anomaly Detection | Compliance | DNS | Dashboards | Data Parsing | Detection-as-code | EDR | Encrypted traffic | Encrypted traffic analysis | GDPR | HTTP | IDSIPS | ISO 27001 | KQL | MITRE ATT&CK | Machine Learning | Monte Carlo | NIST CSF | Network Forensics | PCI DSS | Powershell | Proxy logs | Python | Regular Expressions | SIEM | SPL | SQL | Statistical modeling | TCPIP | Threat hunting | Threat modeling | Traffic analysis | VPN Analysis | “as-code”
Education
Bachelor of Engineering | Bachelor of Science | Master of Science | PhD
Regions
Countries
States
Cities
Related jobs
-
Application Inventory | Asset Management | Audit Procedures | Audit automation | Change ManagementMid-level Full TimeLas Vegas, NV, United States13h ago
-
Senior-level Full TimeDallas, TX, United States17h ago
-
Lead Info Sec Engineer USD 151K-252KAccess Management | Active Directory | Asset Management | Change governance | Configuration ManagementDay shift | Full-time employment | Remote workSenior-level Full TimeDistrict of Columbia-Washington1d ago
-
Lead Info Sec Engineer USD 151K-252KAccess Management | Active Directory | Asset Management | Change governance | Configuration ManagementRemote workSenior-level Full TimeDistrict of Columbia-Washington1d ago
-
Security Engineer III (Pen Tester) USD 102K-179KAccess Control | Adversary Emulation | Application Security | Authentication and Authorization | BashMentorship | Professional development | Reasonable accommodationsSenior-level Full TimeArlington/Rosslyn, Virginia, United States1d ago
-
CNO Reverse Engineer USD 141K-236KAssembly | Atlassian Confluence | Atlassian Crucible | Atlassian Jira | C#Disability insurance | Health insurance | Holiday pay | Learning and development | Life insuranceSenior-level Full TimeUSA-MD-Hanover1d ago
-
Senior Software Engineer, Front End, Google Cloud Web3 USD 174K-252KAI Agents | Angular | BigQuery | Blockchain | Cloud SQLSenior-level Full TimeSunnyvale, CA, USA1d ago
-
Senior Staff Software Engineer, AI/ML, Security USD 262K-365KAdversarial Machine Learning | Cloud | Data Privacy | Data Processing | Data StructuresSenior-level Full TimeKirkland, WA, USA; Seattle, WA, USA1d ago
-
Adversarial Testing | Computer Security | Evaluation | Generative Models | GuardrailsMid-level Full TimeMountain View, CA, USA; New York, …1d ago
-
Lead Cyber Security Engineer | $140K-$175K + Remote + Equity | Exciting High growth AI Operational Intelligence Startup A USD 140K-175KAPI Security | Cloud Security | Governance | ISO 27001 | ISO 42001Equity | Health medical and vision coverage | PTO | Paid Holidays | Remote workExecutive-level Full TimePhiladelphia, PA, United States R1d ago
-
Oracle Cloud Security Engineer USD 100K-150KBash | CIS Benchmarks | Cloud Compliance | Cloud Guard | Cloud infrastructureMid-level Full TimeUnited States - Remote R1d ago
-
Cloud Security Engineer USD 86K-198KAccess Management | Cloud Security | Cloud security monitoring | IAM | Identity and Access ManagementDependent care | Disability insurance | Health insurance | Life insurance | Paid leaveSenior-level Full TimeUSA, FL, Doral (9301 NW 33rd …1d ago
-
Oracle Cloud Security Engineer USD 100K-150KBash | CIS Benchmarks | Cloud Guard | Cloud infrastructure | Data SafeMid-level Full TimeUnited States - Remote R1d ago
-
Oracle Cloud Security Engineer USD 100K-150KBash | CIS Benchmarks | Cloud Guard | Cloud infrastructure | Data SafeMid-level Full TimeUnited States - Remote R1d ago
-
Oracle Cloud Security Engineer USD 100K-150KBash | CIS Benchmarks | Cloud Guard | Cloud Security | Cloud Security FrameworksMid-level Full TimeUnited States - Remote R1d ago
-
Oracle Cloud Security Engineer USD 100K-150KBash | CIS Benchmarks | Cloud Guard | Cloud infrastructure | Data SafeRemote workMid-level Full TimeUnited States - Remote R1d ago
-
Principal Cybersecurity Network AI USD 155K-261KAI machine learning | API Security | AWS | Athena | Azure401k plan | Adoption reimbursement | Disability benefits | Employee assistance programs | Employee discountsSenior-level Full TimeCharlotte, North Carolina1d ago
-
Principal Cybersecurity Network AI USD 155K-261KAWS Glue | Amazon Athena | Amazon Bedrock | Amazon QuickSight | Amazon SageMaker401k plan | Adoption reimbursement | Disability benefits | Employee assistance program | Employee discountsSenior-level Full TimeChantilly, Virginia1d ago
-
DevSecOps Principal Engineer USD 254KAWS | Agile | AppDynamics | Automation | AzureHybrid work schedule | Travel 20%Senior-level Full Time112646-OH-Easton, Columbus, United States1d ago
-
Lead Information Security Engineer USD 187KAgile Scrum | Ansible | Bash | Change Management | CipherTrust Transparent Encryption401k | Commuter benefits | Disability benefits | Life insurance | Paid time offSenior-level Full Time142019-NC-300 South Brevard, Charlotte, United States1d ago
-
ML Administrator USD 77K-176KAWS | Apache Spark | Azure | CI/CD | Data LakehouseDependent care | Paid leave | Professional development | Tuition assistance | Work-life programsSenior-level Full TimeUSA, FL, Doral (9301 NW 33rd …1d ago
-
Lead information Security Engineer USD 143K-224KAccess Management | Authentication | Business Continuity | Content Filtering | Cryptography24x7x365 Operations Center Exposure | Hybrid work schedule | Rotational on-call supportSenior-level Full Time141278-NC-CIC Customer Information Ctr, United States1d ago
-
Lead Information Security Engineer USD 119K-224KAI ethics | AI for security | APIs | AWS | AzureHybrid work scheduleSenior-level Full Time142019-NC-300 South Brevard, Charlotte, United States1d ago
-
Application Security Engineer USD 100K-150KAbuse detection | Agile | Authentication | Authorization | Bot ProtectionMid-level Full TimeUnited States - Remote R1d ago
-
Application Security Engineer USD 100K-150KAbuse detection | Agile | Authentication | Authorization | Bot Protection100 percent remote | Full-time W2 employment | Visa transfer supportMid-level Full TimeUnited States - Remote R1d ago