Senior Detection Engineer – Threat Detection & Automation

Talanto; Región Centro; Híbrido; MXN 550.000 - 850.000; Jornada completa

Descripción de la vacante

F5 Networks in Mexico's Región Centro seeks a Security Engineer III in Detection Engineering to develop, test, deploy, and improve detections that support Security Operations. You will transform threat intelligence and telemetry into scalable, actionable content in collaboration with Incident Response and Threat Intelligence teams.

Responsibilities include developing detections using Detection-as-Code, aligning coverage with MITRE ATT&CK, automating workflows, onboarding new log sources, and

Formación

• Bachelor's degree or equivalent practical experience.
• 5+ years in cybersecurity or security operations.
• Experience developing, tuning, or maintaining detections in SIEM/EDR.

Responsabilidades

• Develop and maintain detections using Detection-as-Code with version control and CI/CD workflows.
• Map telemetry to adversary behaviors and MITRE ATT&CK to expand coverage.
• Collaborate with Incident Response, Threat Intelligence, and Logging Engineering teams.
• Validate detections with adversary emulation, atomic tests, and production feedback.
• Automate detection workflows, alert enrichment, and onboarding of new log sources.

Conocimientos

Detection engineering

MITRE ATT&CK knowledge

SIEM/EDR experience

Automation & scripting

Cross-functional collaboration

Telemetry analysis

Educación

Bachelor's degree in Information Security, CS, Eng, or related

Herramientas

Splunk

Microsoft Sentinel

CrowdStrike

Descripción del empleo

F5 Networks in Mexico's Región Centro seeks a Security Engineer III in Detection Engineering to develop, test, deploy, and improve detections that support Security Operations. You will transform threat intelligence and telemetry into scalable, actionable content in collaboration with Incident Response and Threat Intelligence teams.

Responsibilities include developing detections using Detection-as-Code, aligning coverage with MITRE ATT&CK, automating workflows, onboarding new log sources, and