Darktrace Cyber AI Engineer

ClearShark LLC; Washington, Northern (District of Columbia, KY); Hybrid; USD 150,000 - 210,000; Full time

Job summary

Optiv + ClearShark is seeking a Darktrace Cybersecurity Engineer to design, deploy, and maintain Darktrace platform components across on-prem, hybrid, and cloud environments. You will tune detections, develop investigation workflows, and integrate with SIEM, SOAR, EDR/XDR, and cloud security stacks.

You will collaborate with SOC, network, cloud, and identity teams to translate detections into actionable security outcomes, supporting incident response and threat hunting with deep telemetry

Qualifications

• Active Secret clearance required at time of hire.
• Bachelor’s degree in cybersecurity, IT, computer science, engineering, or a related discipline; equivalent combination of education, military training, certifications, and relevant experience may be considered.
• At least 5 years of relevant cybersecurity engineering, security operations, network-security, threat-detection, incident-response, or security-platform administration experience.
• At least 5 years of experience with Darktrace or comparable technologies in one or more categories: Network Detection and Response (NDR), Extended Detection and Response (XDR), Endpoint Detection and Response (EDR), Network Security Monitoring (NSM), SIEM, UEBA, SOAR.
• Email security, cloud security, or identity-threat detection.
• Demonstrated hands-on experience deploying, configuring, tuning, administering, and troubleshooting Darktrace or similar enterprise cybersecurity platforms.
• Strong knowledge of enterprise networking and network-security concepts.

Responsibilities

• Design, deploy, configure, administer, and maintain Darktrace platform components within on-premises, hybrid-cloud, and cloud-hosted environments.
• Configure and tune detections, behavioral models, alerting thresholds, autonomous-response policies, and investigative workflows.
• Lead or support implementation of Darktrace capabilities across network, email, endpoint, cloud, SaaS, and identity-security use cases.
• Perform health checks, capacity planning, upgrades, configuration validation, and troubleshooting.
• Analyze Darktrace telemetry to identify malicious activity, false positives, and tuning opportunities.
• Collaborate with SOC, incident responders, threat hunters, and engineering teams to investigate and contain events.
• Develop use cases for threat detection, triage, and escalation; ensure secure integrations with SIEM/SOAR.
• Secure automation via APIs, webhooks, and scripting to exchange events and support incident response.

Skills

Darktrace

NDR

EDR

SIEM

SOAR

Threat hunting

Incident response

Python scripting

Cloud security

Linux admin

Education

Bachelor's degree in cybersecurity

Tools

Microsoft Sentinel

Splunk

IBM QRadar

Elastic

Cortex XSOAR

ServiceNow

Job description

Optiv + ClearShark is seeking a Darktrace Cybersecurity Engineer to design, deploy, and maintain Darktrace platform components across on-prem, hybrid, and cloud environments. You will tune detections, develop investigation workflows, and integrate with SIEM, SOAR, EDR/XDR, and cloud security stacks.

You will collaborate with SOC, network, cloud, and identity teams to translate detections into actionable security outcomes, supporting incident response and threat hunting with deep telemetry