Detection Architect: SIEM, EDR & Cloud Security

S&P Global; United States; On-site; USD 140,000 - 155,000; Full time

Benefits offered by this job

Health Insurance

Flexible Downtime

Continuous Learning

Retirement Planning

Family Friendly Perks

Job summary

S&P Global is seeking an experienced Detection Engineer to design and develop advanced detection logic for SIEM, EDR, cloud tools, and network monitoring. You will map threat techniques using MITRE ATT&CK to generate real-time alerts and improve visibility across the organization.

You will continuously tune detections, reduce false positives, and apply Detection-as-Code with version control, automated testing, and CI/CD.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or equivalent professional experience.
• 5+ years of hands-on cybersecurity experience with at least 2+ years in detection engineering, threat hunting, or security operations.
• Proficiency in Python, PowerShell, or Bash, plus SQL, SPL, KQL, or similar query languages.
• Strong experience with SIEM platforms (Splunk, QRadar, Microsoft Sentinel), EDR (CrowdStrike, SentinelOne, Microsoft Defender), and network monitoring tools.
• Demonstrated knowledge of MITRE ATT&CK and translating threat intel into actionable detections.
• Experience with log analysis, telemetry data interpretation, and data flows across networks, OS, cloud, and IdP.

Responsibilities

• Design and develop advanced detection logic for SIEM, EDR, cloud security, AI security systems, and network monitoring to identify sophisticated threats.
• Map adversary tactics using MITRE ATT&CK to create real-time security alerts and improve threat visibility.
• Tune and optimize detection rules to minimize false positives while preserving high fidelity detections.
• Apply Detection-as-Code with version control, automated testing, peer reviews, and CI/CD to detection rule management.
• Validate defenses with red teams and breach simulation tools to identify coverage gaps and improve detection effectiveness.
• Lead cross-functional initiatives to enhance S&P Global's security posture and mentor junior team members.

Skills

Python

PowerShell

Bash

SQL

SPL

KQL

MITRE ATT&CK

SIEM

EDR

Threat Hunting

Education

Bachelor's degree

Tools

Splunk

QRadar

Microsoft Sentinel

CrowdStrike

SentinelOne

Microsoft Defender

Job description

S&P Global is seeking an experienced Detection Engineer to design and develop advanced detection logic for SIEM, EDR, cloud tools, and network monitoring. You will map threat techniques using MITRE ATT&CK to generate real-time alerts and improve visibility across the organization.

You will continuously tune detections, reduce false positives, and apply Detection-as-Code with version control, automated testing, and CI/CD.