Cyber Threat Detection – Forensic Engineer

Jobtailor; Denver (CO); On-site; USD 90,000 - 130,000; Full time

Job summary

Jobtailor is seeking a cybersecurity professional in Denver to map threat intelligence using MITRE ATT&CK, develop detection rules for Microsoft Sentinel, and tune tools like MDE to minimize false positives. The role emphasizes threat modeling and validating coverage across protections to strengthen security posture.

The ideal candidate brings expertise in log telemetry, frameworks, and threat intelligence to ensure comprehensive threat detection and response across enterprise environments.

Qualifications

• Expertise in threat intelligence mapping and detection rule development.
• Experience with threat modeling to identify attack surfaces.
• Ability to tune tools to reduce false positives and validate coverage.

Responsibilities

• Map threat intelligence information using MITRE ATT&CK to align with real-world adversary tactics.
• Develop detection rules in Microsoft Sentinel to spot attacker behavior.
• Tune and reduce noise and false positives across cyber tools such as MDE.
• Perform threat modeling to identify potential attack weaknesses.
• Validate coverage and effectiveness of tools and protections.

Skills

Threat Intelligence

Detection Rules

Threat Modeling

Log Telemetry

Noise Reduction

False Positive Tuning

Cybersecurity Frameworks

MITRE ATT&CK

Tools

Microsoft Sentinel

MDE

Job description

• Map threat intelligence information using frameworks like MITRE ATT&CK to align with real-world adversary tactics and techniques
• Develop detection rules in Microsoft Sentinel to spot attacker behavior
• Tune and reduce noise and false positives across cyber tools such as MDE
• Perform threat modeling to identify potential attack weaknesses
• Validate coverage and effectiveness of tools and protections

Requirements

• Skilled in various Cyber platforms and log telemetry

Core Competencies

Demonstrates expertise in threat intelligence mapping, detection rule development, and threat modeling to enhance cybersecurity posture. Proficient in tuning cyber tools to minimize false positives and validate security coverage.

Hard Skills

• Threat Intelligence
• Detection Rules
• Threat Modeling
• Log Telemetry
• Noise Reduction
• False Positive Tuning
• Cybersecurity Frameworks
• MITRE ATT&CK
• Microsoft Sentinel
• MDE

Tools & Technologies

• Microsoft Sentinel
• MDE