Senior Detection Engineer: SIEM Detections (Remote)

AspenView Technology Partners, Inc.; Municipio de Rincón de los Sauces; On-site; ARS 181,906,000 - 272,860,000; Full time

Job summary

AspenView Technology Partners is seeking a Senior Detection Engineer to design, build, test and tune detections for a 24/7 SOC serving a large US consumer lender. You will own detections from idea to production, collaborating with threat hunters and the US-based Detection Engineering Lead.

On-site work is in Bogotá or Buenos Aires, with strict adherence to security controls and incident response readiness. You will leverage Elastic Security, CrowdStrike, Defender and AWS telemetry to deliver

Qualifications

• Several years of production experience with SIEM or analytics rules.
• Deep query skills in at least one detection language.
• Strong English communication with US-based lead.

Responsibilities

• Own detection use cases end to end from threat research and logic to testing and release.
• Build correlation and multi-stage detections across endpoint, identity and cloud telemetry.
• Collaborate with threat hunters and productionize hunts into detections.
• Support major incidents by writing emergency detections or sweeping for related activity.

Skills

SIEM detections

Detection languages

MITRE ATT&CK

English communication

Tools

Elastic Security

Splunk

Microsoft Defender

CrowdStrike Falcon

Okta System Log

AWS CloudTrail

GuardDuty

Abstract Security

Cribl

Logstash

Git

Python

PowerShell

Job description

AspenView Technology Partners is seeking a Senior Detection Engineer to design, build, test and tune detections for a 24/7 SOC serving a large US consumer lender. You will own detections from idea to production, collaborating with threat hunters and the US-based Detection Engineering Lead.

On-site work is in Bogotá or Buenos Aires, with strict adherence to security controls and incident response readiness. You will leverage Elastic Security, CrowdStrike, Defender and AWS telemetry to deliver