Detection Engineer

Tasks

• Analyze endpoint telemetry
• Collaborate with threat intelligence teams
• Conduct retrospective detection testing
• Create detection rules for EDR
• Document detection logic and TTPs
• Monitor and validate alerts
• Reduce alert fatigue through tuning
• Stay current on emerging threats
• Translate adversary behaviors into detections
• Triage detection hits
• Tune and maintain detection rules
• Validate detections using simulated activity

Perks/Benefits

• N/A

Skills/Tech-stack

Alert Tuning | Detection engineering | EDR | Endpoint telemetry | MDR | Mitre Attack | SOC Operations | Threat hunting