AI-Powered Detection Engineer

Primetime; United States; Remoto; USD 160.000 - 190.000; Tempo pieno

Descrizione del lavoro

Artemis in the United States is seeking a Detection Engineer to own the detection content powering the Artemis platform. You will design, implement, test, and tune high-fidelity detections across cloud, identity, endpoint, and SaaS sources—treating detection as code and using AI to accelerate authoring and validation.

This hands-on role shapes what threats we catch and how quickly we catch them, with emphasis on precision, context, and machine-readable output to feed a scalable, AI-native

Competenze

• 5+ years in cybersecurity with hands-on detection engineering
• Proficient in designing, building, and tuning detections at scale across SIEM/EDR
• Strong in detection languages/formats (Sigma, KQL, SPL, YARA-L) and Python for automation
• Deep knowledge of MITRE ATT&CK and how it manifests in logs across cloud/identity/endpoint/SaaS
• Experience with detection-as-code workflows: Git, peer review, automated testing, CI/CD
• Experience using AI tools to accelerate detection authoring, tuning, or validation
• Experience building behavioral or anomaly-based detections with baselines
• Strong log-analysis skills; ability to distinguish malicious activity from benign noise
• Clear written and verbal communication to document logic and explain trade-offs

Mansioni

• Build and maintain the detection library across cloud, identity, endpoint, and SaaS sources
• Practice detection-as-code with version control, peer review, automated validation, and CI/CD
• Map coverage against MITRE ATT&CK and prioritize gaps
• Validate detections with attack simulations and test harnesses
• Tune false positives/negatives and sunset unused detections
• Use AI to write, convert, test, and document rules
• Engineer anomaly-based detections with behavioral baselines
• Create detections that support AI-powered investigation
• Translate threat intel and hunt results into durable detection logic
• Collaborate with SOC/research teams and tailor content for customers

Conoscenze

Detection engineering

SIEM/EDR detections

Sigma/KQL/SPL/YARA-L

Python automation

MITRE ATT&CK

Detection-as-code

AI-assisted detection

Anomaly-based detections

Log analysis

Documentation

Strumenti

Git

CI/CD

Threat hunting tooling

Descrizione del lavoro

Artemis in the United States is seeking a Detection Engineer to own the detection content powering the Artemis platform. You will design, implement, test, and tune high-fidelity detections across cloud, identity, endpoint, and SaaS sources—treating detection as code and using AI to accelerate authoring and validation.

This hands-on role shapes what threats we catch and how quickly we catch them, with emphasis on precision, context, and machine-readable output to feed a scalable, AI-native