Senior Detection Engineer — Hybrid/Remote Growth

AspenView Technology Partners, Inc.; Bogotá ciudad; Híbrido; COP 120 000 000 - 180 000 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Competitive base

Flexible work model

Growth opportunities

Inclusive culture

US-Colombia collaboration

Resumo da oferta

AspenView Technology Partners, Inc. is seeking a Senior Detection Engineer to design, build, test, and tune detections that drive alerts for a 24/7 SOC serving a US consumer lender. Work on-site from Bogotá or Buenos Aires with autonomy to take a use case from idea to production.

You will own end-to-end detections, instrument multi-stage detections, and collaborate with threat hunters onsite. Strong focus on data quality, incident support, and engineering best practices in a fast-paced security

Qualificações

• Several years writing, testing and tuning detections in production on a SIEM or analytics platform.
• Deep query skills in at least one detection language.
• Ability to learn another detection language quickly.

Responsabilidades

• Own detection use cases end to end, from threat research to release with client approval.
• Build correlations across endpoint, identity, network, email and cloud telemetry.
• Create custom IOAs in CrowdStrike and detectors in Defender and Okta.
• Tune rules, document changes and reduce false positives.
• Support major incidents with emergency detections when needed.

Conhecimentos

Detection engineering

SIEM tuning

Python scripting

English communication

Ferramentas

Elastic Security

CrowdStrike

Microsoft Defender

Okta

Palo Alto

AWS CloudTrail

Git

PowerShell

Descrição da oferta de emprego

AspenView Technology Partners, Inc. is seeking a Senior Detection Engineer to design, build, test, and tune detections that drive alerts for a 24/7 SOC serving a US consumer lender. Work on-site from Bogotá or Buenos Aires with autonomy to take a use case from idea to production.

You will own end-to-end detections, instrument multi-stage detections, and collaborate with threat hunters onsite. Strong focus on data quality, incident support, and engineering best practices in a fast-paced security