Detection Engineering Lead — Hybrid/Remote, Buenos Aires Focus

AspenView Technology Partners, Inc.; Argentina; On-site; ARS 138,464,000 - 200,003,000; Full time

Benefits offered by this job

Hybrid/Remote work options

Career growth visibility

Leadership exposure

Job summary

AspenView Technology Partners is seeking a Detection Engineering Lead to own detection engineering for a large US consumer lender. You will lead the Detection Engineer, set priorities, and review rules, collaborating with threat hunters on the same floor.

This is an on-site role at our Buenos Aires office with US Eastern business hours. You will implement detection as code, provide MITRE ATT&CK coverage reporting, and drive production detections from threat hunting findings.

Qualifications

• 8+ years writing and tuning detections in production on a SIEM or analytics platform.
• Engineering discipline: detections as code with version control and testing.
• Strong English communication to present coverage and gaps to client leadership.
• Availability: Full-time, on-site in Buenos Aires, with US Eastern business hours.
• Bonus qualifications include Elastic Security, Cribl, and regulatory experience.

Responsibilities

• Own detection inventory end to end with clear owners.
• Prioritize detection work based on threat intel and incidents.
• Build identity-centric detections on Okta and defenses on CrowdStrike/Microsoft Defender.

Skills

Detections engineering

SIEM expertise

Threat hunting

Team leadership

English B2+/C1

Detections as code

Elastic Security

Cloud/AWS coverage

Tools

Elastic Security

CrowdStrike Falcon

Microsoft Defender

Okta System Log

AWS CloudTrail

GuardDuty

ServiceNow SecOps

Cribl

Sigma

YARA

Caldera

Job description

AspenView Technology Partners is seeking a Detection Engineering Lead to own detection engineering for a large US consumer lender. You will lead the Detection Engineer, set priorities, and review rules, collaborating with threat hunters on the same floor.

This is an on-site role at our Buenos Aires office with US Eastern business hours. You will implement detection as code, provide MITRE ATT&CK coverage reporting, and drive production detections from threat hunting findings.