Cyber Threat Detection & Forensic Engineer (Hybrid Denver)

3Core Systems, Inc; Denver, Northern (CO, KY); Hybrid; USD 110,000 - 160,000; Full time

Job summary

3Core Systems, Inc is seeking a Cyber Threat Detection & Forensic Engineer in Denver, CO for a long-term role. The position is hybrid (3 days in office, 2 days remote) with on-site work required from day one.

The engineer will map threat intelligence using MITRE ATT&CK, develop detection rules in Microsoft Sentinel, and tune defenses across tools such as MDE to reduce noise. Strong threat modeling and telemetry expertise are essential.

Qualifications

• Knowledge of MITRE ATT&CK framework and mapping threat intel to real-world adversary tactics.
• Experience creating and tuning detection rules in Microsoft Sentinel to identify attacker behavior.
• Ability to tune and reduce noise/false positives across cyber tools such as MDE.
• Strong threat modeling skills to identify potential attack weaknesses.
• Ability to validate coverage and effectiveness of security tools and protections.
• Familiarity with multiple cyber platforms and log telemetry.

Responsibilities

• Map threat intelligence to MITRE ATT&CK to align with adversary techniques.
• Develop and tune detection rules in Microsoft Sentinel.
• Reduce noise and false positives across cyber tools like MDE.
• Perform threat modeling to identify weaknesses in the environment.
• Validate coverage and effectiveness of tools and protections.
• Demonstrate proficiency with various cyber platforms and log telemetry.

Skills

MITRE ATT&CK

Threat detection rule development

False positives tuning

Threat modeling

Tool coverage validation

Log telemetry expertise

Tools

Microsoft Sentinel

Microsoft Defender for Endpoint (MDE)

Job description

3Core Systems, Inc is seeking a Cyber Threat Detection & Forensic Engineer in Denver, CO for a long-term role. The position is hybrid (3 days in office, 2 days remote) with on-site work required from day one.

The engineer will map threat intelligence using MITRE ATT&CK, develop detection rules in Microsoft Sentinel, and tune defenses across tools such as MDE to reduce noise. Strong threat modeling and telemetry expertise are essential.