AI-Driven Detection Engineer

Artemis; New York (NY); On-site; USD 100,000 - 160,000; Full time

Benefits offered by this job

MDR exposure

Attack simulation

Threat hunting

UEBA basics

AI-assisted tooling

Open-source contributions

Job summary

Artemis is looking for a Detection Engineer to own high‑fidelity detections across cloud, identity, endpoint, and SaaS environments—treating detection as code and using AI to scale authoring and testing.

You will prototype anomaly‑based detections, validate with attack simulations, reduce false positives, and collaborate with SOC and research teams to ship robust, auditable detections for customers.

Qualifications

• 5+ years in cybersecurity with hands-on detection engineering.
• Design, build, and tune detections at scale across SIEM/EDR or custom platforms.
• Proficient in Sigma, KQL, SPL, YARA-L; Python for automation/testing.
• Deep knowledge of MITRE ATT&CK and log sources across cloud/identity/endpoint/SaaS.
• Experience with detection-as-code workflows: Git, peer review, automated testing, CI/CD.
• Experience using AI tools to accelerate detection authoring/tuning.
• Experience building behavioral or anomaly-based detections with baselines.
• Strong log-analysis and ability to document detection logic clearly.

Responsibilities

• Build and maintain the detection library across cloud, identity, endpoint, and SaaS sources from hypothesis to production.
• Practice detection-as-code with version control, peer review, automated validation, and CI/CD deployment.
• Map coverage against MITRE ATT&CK, prioritize gaps, and close them.
• Validate detections with attack simulations and test harnesses to prove true positives and minimize false positives.
• Tune false positives/negatives across the fleet and sunset outdated detections.
• Use AI to write detections at scale and build trustworthy AI-generated content.
• Engineer detections for AI-powered investigations with rich context.
• Translate threat intelligence into durable, behavioral detection logic.
• Collaborate with SOC and research teams to drive improvements and provide documentation.
• Support customer-specific tuning to reduce noise while preserving coverage.

Skills

Detections engineering

SIEM/EDR detections

Detection languages

Python automation

MITRE ATT&CK

Detection-as-code

AI-assisted detections

Anomaly detections

Log analysis

Clear communication

Job description

Artemis is looking for a Detection Engineer to own high‑fidelity detections across cloud, identity, endpoint, and SaaS environments—treating detection as code and using AI to scale authoring and testing.

You will prototype anomaly‑based detections, validate with attack simulations, reduce false positives, and collaborate with SOC and research teams to ship robust, auditable detections for customers.