Director, Cyber Security Detection Engineering
US - Gaithersburg - MD, United States
USD 169K-253K Executive-level Full Time
Tasks
- Develop automated enrichment triage and investigation playbooks
- Develop detection engineering governance and quality frameworks
- Develop test and deploy detection logic
- Direct detection engineering strategy and roadmap
- Drive remediation of detection gaps
- Enforce detection standards and naming conventions
- Maintain detection content libraries with version control
- Map detections to MITRE ATTACK
- Operationalize AI agents machine learning for detection
- Oversee purple team adversary emulation exercises
- Oversee telemetry data pipelines and quality
- Own detection engineering metrics and executive reporting
Perks/Benefits
- Dental insurance
- Health insurance
- Paid Holidays
- Paid leave
- Paid vacation
- Retirement plan 401 k
- Vision insurance
Skills/Tech-stack
Adversary Emulation | Artificial Intelligence | Automation | Cloud Security | Control Systems | Data Engineering | Data Quality | EDR | ICS Security | Identity Security | Industrial Control Systems | Industrial control | Log Aggregation | Machine Learning | Mitre Attack | OT/ICS | OT/ICS security | Purple Teaming | Query Optimization | SIEM | SOAR | Telemetry | Threat Intelligence | Tuning
Education
N/A
Related jobs
-
Cybersecurity Engineer (CDAP) - Senior USD 130K-180KAnalytics | C2C | Connectors | Continuous Monitoring | CybersecurityOnsite work in Fairfax VA five days per weekSenior-level Full TimeFAIRFAX, VA, United States1d ago
-
Security Engineer USD 99K-130KAWS | Access Management | Azure | Bash | Cloud SecurityImmediate start preferred | Onsite work environmentMid-level Full TimeDaly City, United States1d ago
-
Expert cyber security engineer(1/261/25) USD 146K-234KArtificial Intelligence | Automation | Big Data | Cloud Computing | Cloud SecuritySenior-level Full TimeSpringfield, United States1d ago
-
Agile Framework | Antivirus | Authentication Systems | Automation | Cisco IPActive Clearance required | Onsite workMid-level Full TimeColorado Springs, Colorado, United States1d ago
-
Security Engineer II, Insider Threat (TS/SCI, Onsite) USD 102K-179KAll source analysis | Compliance | Cybersecurity | Insider Threat | InvestigationsCompetitive benefits package | Onsite work 3 days per week | Professional development programs | Professional mentorshipMid-level Full TimeArlington/Rosslyn, Virginia, United States1d ago
-
Security Engineer II, DCO Engineer (TS/SCI, Onsite) USD 88K-147KAWS | Ceph | Cyber Defense | Cyber Operations | CybersecurityMid-level Full TimeDenver, Colorado, United States1d ago
-
Security Engineer III, SIEM Engineer (Secret Clearance) USD 102K-188KCorrelation searches | CrowdStrike NG-SIEM | Dashboard Reporting | Event analysis | Incident AnalysisMentorship | Professional development | Remote workSenior-level Full TimeArlington/Rosslyn, Virginia, United States; Baltimore, Maryland, …1d ago
-
Bash | Detection Systems | Detection and Response | Digital forensics | EDRMentorship | Professional development | Team collaboration | Travel opportunitiesSenior-level Full TimeArlington/Rosslyn, Virginia, United States; Baltimore, Maryland, …1d ago
-
Consultant - AI SOC USD 102K-188KAPI Integration | Automation and response | Case management | Data Enrichment | Data IngestionMid-level Full TimeChicago, Illinois, United States1d ago
-
Manager - AI SOC USD 107K-188KApplication Programming | Application Programming Interfaces | Artificial Intelligence | Automation and response | Case managementMid-level Full TimeChicago, Illinois, United States1d ago
-
Application Security Engineer USD 100K-215KAWS | Artificial Intelligence | Azure | CI/CD | Code reviewMid-level Full TimeTysons Corner, VIRGINIA, United States1d ago
-
Director, Security Engineering USD 209K-246KCloud Security | Cybersecurity | Detection and Response | Extended Detection and Response | Identity Threat DetectionBehavioral wellness services | Employee equity plan | Employee recognition program | Generous time away from work | Health care insuranceExecutive-level Full TimeAustin, TX, United States,2d ago
-
Director, Security Engineering USD 209K-246KCloud Security | Cybersecurity | Detection and Response | Extended Detection and Response | Identity Threat DetectionBehavioral and Emotional Wellness Services | Employee equity plan | Employee recognition program | Generous time away from work | Health care insuranceExecutive-level Full TimeUS - California2d ago
-
Information Systems Security Officer USD 140K-160KACAS | Account Management | ArcSight | Audit Log | Audit Log Review401k match | Casual dress code | FSA | Free lunch | HSASenior-level Full TimeHawthorne, California, United States2d ago
-
Cybersecurity Administrator, Data Loss Prevention USD 110K-190KAccess Control | Access Management | CASB | Cause analysis | Data Classification401k match | Casual dress code | Dental insurance | FSA | Free lunchSenior-level Full TimeSan Francisco, California, United States2d ago
-
Senior IT & Security Operations Engineer USD 70K-300KAWS | Amazon Web Services | Bash | CrowdStrike Falcon | EDROn-call incident response | On-site work | Vendor management and procurement supportSenior-level Full TimeIrvine, CA2d ago
-
Cybersecurity SOC Analyst II USD 110K-160K800-171 | Allow Block Listing | App Allow Block Listing | Azure Sentinel | Bash401k match | Casual dress code | FSA | Free daily lunch | HSAMid-level Full TimeSan Francisco, California, United States2d ago
-
Cybersecurity SOC Analyst II USD 110K-160K800-171 | Azure Sentinel | Bash | CIS Controls | CMMC401k match | Casual dress code | FSA | Free daily lunch | HSAMid-level Full TimeHawthorne, California, United States2d ago
-
Security Engineer II USD 160K-180KAPI Security | AWS | Application Security | Authentication | AuthorizationHealth insurance | Learning and development | Life insurance | Mental health benefitsMid-level Full TimeSeattle, Washington United States, United States2d ago
-
Security Engineer II USD 160K-180KAPI Security | AWS | Application Security | Authentication | AuthorizationDental insurance | Family-forming benefits | Learning and development benefits | Life insurance | Medical insuranceMid-level Full TimeSeattle, Washington United States, United States2d ago
-
Agile Framework | Cybersecurity frameworks | Data Visualization | Databricks | IDSTeleworkSenior-level Full TimeVirginia Client Office (VA88), United States2d ago
-
Sr. Consultant - SaaS Security (Remote) USD 115K-160KABAC | Alerting | Attack Path | Attack Path Analysis | AutomationEmployee networks | Paid adoption leave | Paid parental leave | Paid vacation and holidays | Professional development opportunitiesSenior-level Full TimeUSA MA Remote, United States R2d ago
-
Director, Cyber Security Incident Response Team (CSIRT) USD 169K-253KAccess Management | Automation | Automation Playbooks | Chain of Custody | Cloud logging401-k plan | Health benefits | Paid Holidays | Paid leave | Paid vacationExecutive-level Full TimeUS - Gaithersburg - MD, United …2d ago
-
Cyber Operations Senior Detection Engineer USD 136K-204KBehavioral analytics | Detection logic | Detection tuning | Detection-as-code | EDRSenior-level Full TimeUS - Gaithersburg - MD, United …2d ago
-
Security Operations Analyst - 3rd Shift USD 80K-100KAWS | Azure | CIS Controls | DNS | ELKDental insurance | Flexible work environment | Life insurance | Medical insurance | Pre-tax retirement savings programSenior-level Full TimeUnited States2d ago