This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Detection Engineer, Falcon Complete based in the United States.
As a Detection Engineer, you will play a critical role in developing and maintaining advanced security detections that power large-scale managed detection and response operations. You will join a specialized engineering team focused on identifying emerging cyber threats and transforming threat intelligence into high-quality, actionable detection rules. Working with extensive datasets and diverse third-party security technologies, you will help close detection gaps and strengthen protection against increasingly sophisticated adversaries. You will contribute throughout the detection engineering lifecycle, from threat research and data analysis to rule development, testing, deployment, and automation. You will also leverage artificial intelligence, large language models, and modern development tools to accelerate detection workflows and improve accuracy at scale. This remote opportunity offers the chance to collaborate with experienced security professionals and make a meaningful impact on global cybersecurity operations.
Accountabilities:
- Conduct threat research and proactive threat hunting to identify emerging adversary tactics, techniques, and procedures (TTPs), translating intelligence findings into effective detection strategies.
- Develop, test, deploy, and maintain high-fidelity detection rules for a Next-Generation SIEM platform, supporting advanced managed detection and response capabilities.
- Respond rapidly to emerging threats, including zero-day vulnerabilities and newly discovered attack techniques, by creating and improving relevant detection coverage.
- Analyze security events and large datasets across multiple third-party technologies and data sources to identify suspicious activity, attack patterns, and detection gaps.
- Perform code reviews, validation, and testing to ensure detection rules meet established quality, accuracy, reliability, and performance standards before large-scale deployment.
- Apply Continuous Integration and Continuous Delivery (CI/CD) best practices to manage and deploy detection rules as code.
- Contribute to an AI-powered detection engineering ecosystem by leveraging large language models (LLMs), AI coding agents, and intelligent automation tools to accelerate threat research, rule development, and operational workflows.
- Collaborate with SIEM architects and engineering teams to establish best practices for data ingestion, parsing, and normalization using common event schemas.
- Build, improve, and maintain internal utilities, tools, and automation solutions that help managed security teams operate more efficiently and at scale.
- Develop and maintain technical documentation, operational processes, and engineering standards to support consistency and continuous improvement.
- Participate in a Detection Engineer on-call rotation, providing technical support and responding to operational requirements when needed.
Requirements:
- At least 3 years of professional experience as a Detection Engineer, Security Engineer, Security Analyst, Threat Intelligence Analyst, or in a closely related cybersecurity role.
- Strong understanding of current cybersecurity threats, adversary behaviors, attack techniques, and methods for detecting malicious activity using SIEM technologies.
- Practical experience developing, maintaining, or optimizing security detection rules and analyzing security events.
- Experience working with large datasets from multiple vendors, platforms, and security technologies.
- Hands-on familiarity with SIEM solutions such as LogScale, Splunk, Sumo Logic, Microsoft Sentinel, IBM QRadar, or LogRhythm.
- Strong analytical and investigative skills, with the ability to identify threat patterns, assess security telemetry, and translate findings into actionable detection logic.
- Experience with Python or other scripting languages for automation, data processing, and security engineering tasks is strongly preferred.
- Familiarity with large language models (LLMs), AI-powered development tools, and AI coding agents. Hands-on experience building or integrating AI-assisted workflows is an advantage.
- Proven experience using AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency, and drive business outcomes.
- Knowledge of software development practices, including code reviews, testing, version control, and CI/CD methodologies.
- Relevant industry certifications are desirable, including GCFA, GCDA, GCIH, or other recognized cybersecurity qualifications.
- Strong curiosity, initiative, and a self-motivated approach to investigating complex security challenges.
- High standards of technical quality, attention to detail, and commitment to producing reliable and effective detection solutions.
- Excellent collaboration and communication skills, with the ability to work effectively with security researchers, engineers, architects, and managed security operations teams.
- Ability to manage priorities, adapt to evolving threats, and contribute effectively in a fast-paced, remote working environment.
Benefits:
- Competitive compensation: Annual base salary ranging from $100,000 to $150,000, depending on relevant experience, qualifications, skills, and location.
- Eligibility for additional performance-based bonuses and equity grants.
- Comprehensive healthcare coverage, including health insurance.
- Retirement savings benefits through a 401(k) plan.
- Competitive paid time off and vacation policies to support work-life balance.
- Paid parental and adoption leave.
- Comprehensive physical and mental wellness programs.
- Professional development and career advancement opportunities for employees at every level.
- Opportunities to expand technical expertise through continuous learning, cybersecurity training, and exposure to advanced security technologies.
- Employee resource networks, regional communities, and volunteering opportunities that encourage professional connections and collaboration.
- Flexible remote working arrangements within the United States.
- An inclusive, collaborative, and innovation-driven working environment that encourages autonomy, experimentation, and continuous improvement.
How Jobgether works:
We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.
We appreciate your interest and wish you the best!
Why Apply Through Jobgether?
Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.