AI-Driven Threat Detection Engineer

Capgemini; New York (NY); On-site; USD 105,000 - 145,000; Full time

Job summary

Capgemini in New York is seeking a Threat Detection Engineer to develop and enhance enterprise threat detection capabilities across security monitoring platforms. You will create advanced detection logic, perform threat hunting, and coordinate with SOC, cyber defense and threat intelligence teams to reduce cyber risk.

The role emphasizes building detections for traditional and AI-enabled environments, with opportunities to work on MITRE ATT&CK mappings and automated response workflows, while

Qualifications

• Develop and tune SIEM detection use cases and correlation rules.
• Perform proactive threat hunting and behavioral analytics.
• Create and maintain security monitoring content.
• Investigate emerging threats and map detections to MITRE ATT&CK.
• Improve detection coverage for cloud, endpoint and network environments.
• Build automated response workflows and security analytics dashboards.
• Support detection strategies for AI GenAI and LLM-based technologies.

Responsibilities

• Develop and tune SIEM detection use cases and correlation rules.
• Perform proactive threat hunting and behavioral analytics.
• Create and maintain security monitoring content.
• Investigate emerging threats and map detections to MITRE ATT&CK.
• Improve detection coverage for cloud, endpoint and network environments.
• Build automated response workflows and security dashboards.
• Support detection strategies for AI GenAI and LLM-based technologies.

Skills

Threat Detection Engineering

Splunk Security Analytics

Threat Hunting

Incident Response

Security Automation SOAR

AI Security GenAI Monitoring

Job description

Capgemini in New York is seeking a Threat Detection Engineer to develop and enhance enterprise threat detection capabilities across security monitoring platforms. You will create advanced detection logic, perform threat hunting, and coordinate with SOC, cyber defense and threat intelligence teams to reduce cyber risk.

The role emphasizes building detections for traditional and AI-enabled environments, with opportunities to work on MITRE ATT&CK mappings and automated response workflows, while