Cyber Threat Detection Engineer

Colossus Technologies Group; United States; Remote; USD 80,000 - 100,000; Full time

Job summary

An innovative organization is seeking a Cyber Threat Detection Engineer to enhance their cybersecurity efforts. In this vital role, you will build and maintain advanced detection logic across various platforms, ensuring rapid response to threats. Join a team dedicated to protecting healthcare systems and making a meaningful impact in a critical industry. This contract-to-hire position offers strong growth potential and competitive pay, making it an exciting opportunity for professionals passionate about cybersecurity.

Qualifications

• 3-5+ years in cybersecurity with focus on threat detection.
• Experience with detection tools like Splunk and CrowdStrike.

Responsibilities

• Design and implement threat detection rules across environments.
• Collaborate with teams to improve detection efficacy.

Skills

Cybersecurity

Threat Detection

SIEM/EDR Development

Log Analysis

Scripting (Python, PowerShell, Bash)

Collaboration Skills

Education

Bachelor's Degree in Cybersecurity or related field

Tools

Splunk

CrowdStrike

SentinelOne

Carbon Black

AWS

Azure

Job description

Colossus Technologies Group provided pay range

This range is provided by Colossus Technologies Group. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.

Base pay range

$70.00/hr - $85.00/hr

Job Title: Cyber Threat Detection Engineer (Contract-to-Hire)

Location: Remote (U.S.-based)

Employment Type: Contract-to-Hire

Overview:

Join our client, a nationally respected organization that plays a critical role in safeguarding healthcare and operational services for millions across the country. This organization is deeply invested in cybersecurity innovation and resilience, protecting a broad digital ecosystem that spans clinical systems, cloud infrastructure, and enterprise networks.

We’re seeking a Cyber Threat Detection Engineer to join the enterprise Cyber Threat Intelligence & Detection team. In this role, you will be responsible for building, tuning, and maintaining advanced detection logic across SIEM and EDR platforms—enabling rapid response to threats in a high-stakes environment.

Key Responsibilities:

• Design and implement threat detection rules across SIEM, EDR, and cloud environments to identify malicious activity with high accuracy
• Continuously tune and refine detection content based on real-world threats, threat intel, and red/purple team findings
• Collaborate with threat intel analysts, hunters, and incident responders to identify gaps in detection coverage and improve overall detection efficacy
• Analyze logs, telemetry, and alerts to validate detections, minimize false positives, and support incident investigations
• Develop automated logic and alerting to enhance real-time monitoring of endpoints, networks, and cloud workloads
• Map detections to MITRE ATT&CK and other frameworks to guide coverage and threat modeling
• Support purple team and adversary emulation exercises by translating simulated TTPs into new detections
• Work closely with SOC and platform engineering teams to implement scalable, resilient detection pipelines

Required Qualifications:

• 3–5+ years of experience in cybersecurity with at least 2 years focused on threat detection, SOC engineering, or SIEM/EDR development
• Hands-on experience with detection tools and platforms such as Splunk, CrowdStrike, SentinelOne, Carbon Black, etc.
• Strong knowledge of attacker techniques (MITRE ATT&CK), malware behavior, and detection strategy best practices
• Experience working with log sources across network, endpoint, and cloud environments (AWS, Azure, etc.)
• Familiarity with scripting (Python, PowerShell, Bash) for detection logic and automation
• Ability to analyze alert data, validate detection logic, and continuously improve rule fidelity
• Strong collaboration skills and comfort working across multiple teams and stakeholders

Preferred Qualifications:

• Background in healthcare or other compliance-heavy sectors
• Experience with SOAR platforms or automated response workflows
• Certifications such as GCED, GCTD, GCIA, or similar are a plus

Why This Role?

You'll be part of a cybersecurity team that protects systems at the heart of patient care, research, and innovation. This is a contract-to-hire opportunity offering strong long-term growth potential, competitive pay, and the chance to make a measurable impact in one of the most meaningful industries there is.

Seniority level

• Seniority level

  Mid-Senior level

Employment type

• Employment type

  Other

Job function

• Job function

  Information Technology and Engineering

• Industries

  Hospitals and Health Care

Referrals increase your chances of interviewing at Colossus Technologies Group by 2x

Sign in to set job alerts for “Security Engineer” roles.

Security Engineer (L5), Security Incident Response Team

Security Engineer (L4) - Application and Infrastructure Security

Palo Alto, CA $140,000.00-$160,000.00 2 weeks ago

United States $90,000.00-$110,000.00 2 months ago

Security Engineer - IR Threat Intelligence

United States $147,000.00-$208,000.00 2 weeks ago

Security Engineer (Safety)- Nashville, TN

Security Detection Engineer, Insider Trust

United States $147,000.00-$208,000.00 2 weeks ago

Security Engineer (Safety) - Nashville, TN

United States $230,000.00-$900,000.00 2 weeks ago

California, United States $45.00-$50.00 3 weeks ago

United States $120,000.00-$145,000.00 4 hours ago

Security Engineer with Cloud Operations - 100% Remote

Washington, DC $110,000.00-$165,000.00 4 months ago

Detection and Incident Response Security Engineer

Boston, MA $134,100.00-$225,000.00 3 months ago

Cybersecurity Principal Engineer – IAM / Data Science (Remote)

Security & Compliance Engineer (New Grad)

Security & Compliance Engineer (New Grad)

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.