Jobs in the United States

25+ jobs

Save this search

Added 2 hours ago
CrowdStrike Platform Resident Consultant - Government (Remote)
CrowdStrike, Inc.
Remote, United States
Leverage CrowdStrike applications (Exposure Management, for example) provide support to customers in vulnerability and asset management
Added 5 hours ago
Principal SecOps & Observability Engineer (Clearance Secret or Top Secret)
Hewlett Packard Enterprise
Ft. Collins, CO · Montgomery, AL · Spring, TX · Oklahoma City, OK · All, MD · All, FL
Tenable Security Center for vulnerability management data, scan/asset integration, and feeding findings into console workflows and dashboards.
Added 10 hours ago
Cyber Security Project Engineer
2HB Incorporated
McLean, VA
2HB Incorporated is seeking a Cyber Security Project Engineer in order to support its government customer in McLean, VA. The Sponsor requires a team to coordinate and manage technical…
Added 11 hours ago
Lead IA Specialist Engineer
Deloitte US
Rosslyn, VA · St. Louis, MO
As a PROJECT - Lead Security Engineer II on the Government & Public Services Cyber team, you will be responsible for:
Added 11 hours ago
Information System Security Engineer | Naples, Italy
Deloitte US
Rosslyn, VA
5+ years of military or civilian experience in one or more of the following: Risk Management Framework support, Security Technical Implementation Guide application, cybersecurity…
Added 11 hours ago
Cyber Operate Senior Consultant - CyberArk
Deloitte US
Jersey City, NJ · Morristown, NJ · NY · Princeton, NJ
Experience designing and documenting CyberArk privileged access management architectures, use cases, technical flows, standard operating procedures, configurations, and implementation…
Added 11 hours ago
Project Senior Engineer
Deloitte US
Colorado Springs, CO
Deloitte’s Government & Public Services practice is seeking a Project Security Engineer III, for our Cyber -Enterprise Security team to support clients in strengthening and scaling…
Added 11 hours ago
Project Senior Engineer
Deloitte US
Colorado Springs, CO
Deloitte’s Government & Public Services practice is seeking a Project Security Engineer III, for our Cyber -Enterprise Security team to support clients in strengthening and scaling…
Added 11 hours ago
Project Cyber Engineer
Deloitte US
Colorado Springs, CO
As a PROJECT - Security Engineer III on the Enterprise Security team, you will be responsible for supporting the implementation and delivery of cybersecurity solutions for government…
Added 11 hours ago
Security Operations Lead
Deloitte US
Tallahassee, FL · Tallahassee, NC
Our Cyber Defense & Resilience offering assists clients in defending against advanced threats by transforming security operations, monitoring technology, data analytics, and threat…
Added 11 hours ago
Cyber - SAP Security and GRC Access & Process Control Consultant / Security Engineer II
Deloitte US
Atlanta, GA · Austin, TX · Boston, MA · Charlotte, NC · Chicago, IL · Costa Mesa, CA · Dallas, TX · Denver, CO · Detroit, MI · Houston, TX · Kansas City, MO · Los Angeles, CA · McLean, VA · Miami, FL · Milwaukee, WI · Minneapolis, MN · Nashville, TN · NY · Philadelphia, PA · Pittsburgh, PA · Portland, OR · Raleigh, NC · Richmond, VA · Sacramento, CA · San Diego, CA · San Francisco, CA · San Jose, CA · Seattle, WA · St. Louis, MO · Tampa, FL · Tempe, AZ · Washington, DC
SAP Security and GRC Access & Process Control Consultant / Security Engineer II
Added 21 hours ago
2027 Space Systems and Orbit Determination Operations Engineer
The Aerospace Corpor
Colorado Springs, CO
…innovative solutions that span satellite, launch, ground, and cyber systems for defense, civil and commercial customers. When you join our team, you'll be part of a special collection of…
Added 21 hours ago
2027 Space Systems and Orbit Determination Operations Engineer
The Aerospace Corpor
Colorado Springs, CO
…innovative solutions that span satellite, launch, ground, and cyber systems for defense, civil and commercial customers. When you join our team, you'll be part of a special collection of…
Added 1 day ago
Senior Engineer, Cybersecurity Engineering / Onsite / Carrollton, TX
Kelly Services
Carrolton, TX
If you are an engineer who thrives at the intersection of cybersecurity, systems engineering, and mission-critical physical infrastructure, this role offers true cradle-to-grave project…
Added 1 day ago
Lead AI Transformation Engineer
Fiserv
Berkeley Heights, NJ
Solid understanding of application security practices across both mainframe and distributed platforms (encryption, access control, secrets management, vulnerability remediation)
Added 1 day ago
Lead Engineer - Operational Technology Network Security
AmerisourceBergen
Conshohocken, PA
…animals everywhere. Apply today! Job Details Summary: The Lead Engineer - Operational Technology Network Security is responsible for designing, implementing, maintaining, and continuously…
Added 1 day ago
AD
Senior Product Security Engineer
Antech Diagnostics
Chicago, IL
- $141,000 to $176,000 USD / year
The Sr. Product Security Engineer will be responsible for defining, implementing and enforcing secure coding practices to ensure that software security is embedded early on (shifting left)…
Added 2 days ago
Cybersecurity Information Security Assessor
GD Information Technology, Inc.
United States
Support DISA/DoW Risk Management Framework (RMF) activities for DEOS systems, ensuring security requirements are engineered into designs and implementations from the outset.
Added 2 days ago
Network Engineer - Skillbridge
Viasat, Inc.
Remote - Florida, FL
You will be a key contributor to our Risk Management Framework (RMF) and Authority to Operate (ATO) lifecycle - hardening and validating equipment against the current DISA STIG, evaluating…
Added 2 days ago
Cyber Systems Security Engineering Stf - E4
Lockheed Martin
Littleton, CO · King of Prussia, PA · Littleton · King of Prussia
The Fleet Ballistic Missile (FBM) program seeks a dedicated Cyber Systems Security Engineer to safeguard critical defense systems and ensure the resilience of strategic deterrence…
Added 2 days ago
Cyber Systems Security Engineering Sr - E3
Lockheed Martin
Littleton, CO · King of Prussia, PA · Littleton · King of Prussia
Lockheed Martin’s 21st Century Security® vision drives the integration of advanced cyber capabilities with trusted, mission-critical systems. In this role, your contributions will help…
Added 2 days ago
Information Assurance Security Engineer (IASE) / Information Systems Security Engineer (ISSE)
LEIDOS, INC.
Suitland, MD
Leidos is hiring a hands-on Information Assurance Security Engineer (IASE) / Information Systems Security Engineer (ISSE) to support a complex, mission-driven enterprise environment in…
Added 2 days ago
Principal / Sr. Principal Cyber Systems Administrator
Northrop Grumman
Huntsville
…secure communications, cloud-based data pipelines, remote asset management, and observability services supporting C‑UAS/BONES architectures in connected, intermittent, and disconnected…
Added 2 days ago
Cybersecurity Engineering Residency Program
Bluestaq US External
CO
…program built around one goal: turning promising early-career cyber talent into full-time Bluestaq Associate Cybersecurity Engineers. This isn't a coffee-run internship. From week one…
Added 2 days ago
Cybersecurity Engineer 5 – ACAS
Ryan Consulting Group
VA
Ryan Consulting Group, Inc. is seeking a Cybersecurity Engineer 5 – ACAS to provide cybersecurity engineering, vulnerability scanning administration, and operational support for the Defense…

BCMC

Senior Detection Engineer

Arlington, VA, United States

Apply About employer

Applications open in a new tab.

Job details

Apply by: Jan 28, 2027
Experience: 10+ years of directly relevant experience
Posting language: English
Posted: Oct 30, 2026

Original job description

BCMC is supporting a U.S. Government customer to provide for onsite incident response to civilian Government agencies and critical asset owners who experience cyber-attacks, providing immediate investigation and resolution. Contract personnel perform investigations to characterize the severity of breaches, develop mitigation plans, and assist with the restoration of services. We are seeking a Senior Detection Engineer in support of this contract.

The Senior Detection Engineer develops, validates, deploys, and tunes detection logic supporting proactive threat hunting across federal and critical infrastructure environments. The role combines advanced threat hunting tradecraft, adversary behavior analysis, and detection engineering to identify sophisticated threats, close visibility gaps, and improve detection effectiveness.

The engineer translates threat intelligence, hunt findings, and incident response lessons into reliable behavioral analytics, investigative queries, and automation. This work moves the team beyond individual hunts toward faster, repeatable, and scalable operations. Working across endpoint, network, identity, and cloud telemetry, the engineer selects detection methods based on available evidence and mission requirements. The position serves as the technical bridge between threat hunters, technical delivery teams, system engineers, analytics developers, and data scientists, turning operational findings into validated detections, automation, sensing improvements, and actionable capability requirements.

Job Responsibilities

Develop and test hypotheses to uncover persistence, privilege escalation, credential access, lateral movement, command and control, and defense evasion. Correlate evidence across data sources and document defensible conclusions.
Build behavioral analytics, correlation rules, signatures, and queries using endpoint, network, identity, cloud, and application telemetry. Target adversary techniques and activity sequences rather than individual indicators of compromise.
Convert validated hunt methods, incident findings, and exercise results into reusable detections. Document each detection’s purpose, data requirements, investigative guidance, assumptions, and known limitations. Translate remaining gaps into technical requirements and acceptance criteria, recommend priorities through Threat Hunting governance, and verify that delivered capabilities meet the operational need.
Test detections against representative malicious and benign activity using historical telemetry, controlled simulations, and purple team exercises. Verify intended behavior, evaluate evasion opportunities, and retain test evidence.
Analyze false positives, false negatives, alert volume, thresholds, exclusions, and environmental baselines. Improve detection fidelity and alert context through enrichment and prioritization, while assessing the risk of suppressing legitimate threat activity.
Assess the availability, reliability, and quality of sensors, tools, and data sources. Identify collection, parsing, normalization, and retention gaps and explain their impact on active hunts and production detections. Coordinate remediation with infrastructure teams and validate restored coverage.
Develop and maintain automation for enrichment, query execution, analytical workflows, and detection validation, including SOAR playbooks where applicable. Tune data pipelines and queries for speed and responsiveness. Build in review, error handling, and recovery procedures.
Maintain version-controlled content, peer reviews, release criteria, approval records, and rollback procedures. Revalidate analytics after platform, schema, environmental, or adversary tradecraft changes.
Coordinate with hunters, incident responders, intelligence analysts, and platform engineers to integrate detections into investigative and automated workflows.
Measure validated detection coverage, fidelity, actionable findings, and remaining gaps. Communicate the operational significance of technical findings and avoid equating rule counts with effective coverage.
Partner with analytics developers and data scientists to develop and validate advanced analytics, including machine learning where appropriate. Assess operational value, false positives, data dependencies, and analytical limitations.
Provide technical leadership supporting the section focal point for vulnerability management (VM) and threat hunting (TH) activities under applicable authorities. Develop exercises cenarios and expected detection outcomes, assess sensing failures, and track corrective actions.
Evaluate new tools, data sources, and analytical methods against identified mission gaps. Document test results, operational limitations, and adoption recommendations.
Review analytical work, mentor analysts, and set standards for query development, documentation, testing, deployment, and tuning. Develop and maintain detection engineering competencies, Job Qualification Requirements (JQRs), training scenarios, and practical assessments in coordination with section leadership.

Required Skills:

Must be a US Citizen
Must have an active TS/SCI clearance
Must be able to obtain DHS Suitability
10+ years of directly relevant experience
Demonstrated senior-level experience in threat hunting, detection engineering, incident response, or closely related defensive cyber operations, including independent ownership of production detection content.
Strong command of hypothesis development, adversary behavior analysis, iterative investigation, and evidence-based conclusions.
Proven ability to develop, test, deploy, and tune production detections, explain their limitations, and assess the effects of exclusions and suppression.
Advanced proficiency in one or more security query languages (KQL, SPL, EQL, ES|QL, or vendor-specific EDR languages), with the ability to adapt and optimize logic across platforms.
Experience analyzing process execution, command lines, process ancestry, authentication, persistence mechanisms, network connections, and related enterprise telemetry.
Understanding of Windows and Linux internals, enterprise networking, identity systems, cloud telemetry, and sophisticated adversary tradecraft.
Practical experience mapping detections to MITRE ATT&CK and explaining the telemetry, test evidence, and limitations behind coverage claims.
Proficiency in Python and PowerShell, or comparable languages, for analysis, enrichment, testing, and automation.
Ability to clearly document detection intent, logic, validation results, investigation steps, and tuning decisions.
Experience translating operational findings into engineering requirements and acceptance criteria, validating sensing effectiveness, and coordinating improvements across hunt analysts and delivery teams.

Desired Skills:

Experience with CrowdStrike Falcon, Microsoft Defender, Cortex XDR, SentinelOne, Elastic, Splunk, or comparable platforms.
Experience with portable detection content such as Sigma
Experience with detection-as-code and automated testing
SIEM data onboarding and pipeline tuning experience
Experience with adversary emulation and cyber exercise development
Federal civilian or critical infrastructure cyber operations experience
Experience with maintaining detection engineering competencies, Job Qualification Requirements, training scenarios, and practical assessments

Required Education:

Bachelor's degree in Engineering, Computer Science, Cybersecurity, Information Systems, or related field (Master's Degree preferred)

Desired Certifications:

GIAC Certified Detection Analyst (GCDA)
GIAC Certified Forensic Analyst (GCFA)
GIAC Defending Advanced Threats (GDAT)
GIAC Certified Intrusion Analyst (GCIA)
GIAC Certified Incident Handler (GCIH)
GIAC Cyber Threat Intelligence (GCTI)
Microsoft Certified: Security Operations Analyst Associate (SC-200)
Certified Information Systems Security Professional (CISSP)

Our Company Overview Business Computers Management Consulting Group, LLC (BCMC) is a small business specializing in Information Technology (IT), Cybersecurity, Information Assurance (IA), SOA, Big Data Management, Program Management, and more for Federal, State, and Local agencies. We possess highly skilled engineers, providing innovative solutions backed by strong past performances. We are ISO 9001:2015, ISO 27001:2013, 20000:2018, and CMMI L3 certified and registered promising highest quality and services to all of our clients.

Benefits

Extremely competitive salary 95% employer paid for employee medical, dental, & vision coverages 100% employer paid for employee life, STD & LTD disability coverages 401k with company match Flexible Spending Account (FSA) for dependent & health care 11 standard holidays & 3 weeks of annual leave

ESS-3688 ESS-3689 Subject Matter Expert I - SME01 - SME

Apply About employer

More about this job

Skills

Incident response
Prioritization
Leadership
Work analytically
Documentation
Query languages
Microsoft Windows
Linux
MITRE ATT&CK
Python
Microsoft PowerShell
Splunk
Test automation
Onboarding
Computer science
Cybersecurity
CISSP

Report this job