Threat-Informed Splunk Detection Engineer - Montreal

Arobas Personnel; Montreal; On-site; CAD 96,000 - 138,000; Full time

Job summary

Arobas Personnel is seeking an experienced Detection Engineer for a contract role in Montréal. You will support a Splunk-based detection environment, working with Incident Response, CTI, SOC and Red Team to strengthen detections and reduce false positives.

Responsibilities include tuning Splunk rules, mapping detections to MITRE ATT&CK, developing new detections, maintaining code in version control, and coordinating with Jira for work items.

Qualifications

• Strong hands-on Splunk experience: SPL, correlation searches, dashboards and data models.
• Proven Detection Engineering experience writing, tuning, and validating SIEM rules.
• Working knowledge of MITRE ATT&CK for threat modeling and coverage mapping.
• Familiarity with security telemetry: EDR, Windows/Linux/Sysmon, network and cloud logs.
• Experience with Threat Hunting methodologies and CTI/I IOCS/TTPs.
• Understanding Incident Response processes and tuning requests to rules.

Responsibilities

• Tune and update Splunk detection rules based on Incident Response requests.
• Design, implement and deploy new Splunk detections aligned with threat patterns.
• Map detections to MITRE ATT&CK and track coverage.
• Maintain detection content under version control and document changes.
• Coordinate with Incident Response, CTI, SOC and Red Team stakeholders.
• Track work items in Jira and ensure timely handoff.

Skills

Splunk

Detection Engineering

MITRE ATT&CK

Threat Hunting

Incident Response

SIEM tuning

Tools

Jira

Git

Python

PowerShell

Job description

Arobas Personnel is seeking an experienced Detection Engineer for a contract role in Montréal. You will support a Splunk-based detection environment, working with Incident Response, CTI, SOC and Red Team to strengthen detections and reduce false positives.

Responsibilities include tuning Splunk rules, mapping detections to MITRE ATT&CK, developing new detections, maintaining code in version control, and coordinating with Jira for work items.