Co-Managed SIEM Detection Engineer – Growth & Impact

Expel; United States; Remote; USD 110,000 - 170,000; Full time

Job summary

Expel is seeking a detection engineer to join its growing professional services function. You will author and tune detection content, optimize SIEM performance, and help customers thrive under a co-managed SIEM model.

You will work across Splunk, Microsoft Sentinel, CrowdStrike NG SIEM, and emerging AI-assisted tooling, collaborating with Detection Engineering, SOC, and Customer Success to deliver end-to-end engagements.

Responsibilities

• Deliver end-to-end professional services engagements covering detection strategy and SIEM optimization.
• Develop and validate detection content that supports defined security use cases.
• Tune detections to reduce alert noise and improve ingestion efficiency.
• Translate detection logic between SIEM platforms and write custom parsers for logs.
• Partner with SOC to hand off environments for ongoing co-managed operations.

Job description

Expel is seeking a detection engineer to join its growing professional services function. You will author and tune detection content, optimize SIEM performance, and help customers thrive under a co-managed SIEM model.

You will work across Splunk, Microsoft Sentinel, CrowdStrike NG SIEM, and emerging AI-assisted tooling, collaborating with Detection Engineering, SOC, and Customer Success to deliver end-to-end engagements.