Cyber Operate Detection Engineer - Consultant

Deloitte France; Nashville (TN); On-site; USD 83,000 - 163,000; Full time

Job summary

Deloitte's Cyber Operate Offering seeks a Managed Services Engineer II to help develop, test, tune, and maintain detections that support client security operations.

You will review threat intel, write rules for SIEM platforms, tune detections, test against threats, and collaborate with SOC analysts and client teams to ensure robust threat coverage.

A collaborative, fast-paced environment demands strong communication, independent work, and the ability to lead projects.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or Computer Engineering.
• 2+ years of experience in cybersecurity, security operations, threat intelligence, networking, or systems administration.
• Experience reviewing authentication events, network traffic, OS activity, vulnerability data, security logs, or alerts.
• Experience using at least one scripting or query language such as Python, PowerShell, SQL, KQL, or SPL.
• Experience documenting technical findings, test results, or detection logic.
• Limited immigration sponsorship may be available.

Responsibilities

• Review threat intelligence, emerging threats, attack techniques, vulnerabilities, and historical incident information to identify detection requirements.
• Develop, maintain, and update detection rules, queries, signatures, and indicators of compromise for security monitoring platforms.
• Configure and tune detections; identify false positives; and recommend improvements that maintain effective threat coverage.
• Test and validate detection rules against known threats and attack scenarios; document test results, configuration changes, and detection logic.
• Monitor detection performance; investigate gaps or unexpected results; support incident-response research; and collaborate with SOC analysts, threat hunters, incident responders, Platform Operations Engineers, and client teams.

Skills

Teamwork

Communication

Attention to detail

Relationship building

Project leadership

Multi-tasking

Interpersonal skills

Deadline driven

Mentoring / guidance

Cybersecurity basics

Education

Bachelor's degree in CS/IT/Engineering

Tools

Microsoft Sentinel

Splunk

Google Security Operations

Elastic

CrowdStrike

Microsoft Defender

Sigma rules

YARA rules

Kusto (KQL)

Splunk SPL

Git

Job description

Deloitte's Cyber Operate Offering seeks a Managed Services Engineer II to help develop, test, tune, and maintain detections that support client security operations.

You will review threat intel, write rules for SIEM platforms, tune detections, test against threats, and collaborate with SOC analysts and client teams to ensure robust threat coverage.

A collaborative, fast-paced environment demands strong communication, independent work, and the ability to lead projects.