Detection & Automation Engineer - Hybrid Federal SOC

Zermount, Inc.; Arlington (VA); Hybrid; USD 110,000 - 150,000; Full time

Job summary

Zermount, Inc. is seeking a Detection and Automation Engineer to design, implement, and validate analytics, detections, dashboards, and automation for security operations center support.

The role combines hands-on engineering with disciplined validation, documentation, troubleshooting, and collaboration across analysts, threat hunters, intelligence personnel, platform engineers, and operational stakeholders.

Qualifications

• Experience building/testing security analytics and detections in enterprise SIEM
• Proficient in scripting/integrating with Python, PowerShell, APIs, JSON
• Experience testing capabilities, documenting work, troubleshooting production issues

Responsibilities

• Develop and document custom analytics, detections, dashboards, scripts, and automation playbooks
• Tune sensors, alerts, and analytics to reduce false positives and improve analyst workflows
• Translate threat intel and incident lessons into improved detection content and response logic
• Prototype and integrate approved technologies to address monitoring and reporting gaps
• Validate capabilities before operation and document results and dependencies
• Maintain automation and SOAR playbooks using approved tools
• Diagnose failed automation and restore or rollback functions with documentation
• Recommend improvements to SOC tools, workflows, content
• Support deployment and troubleshooting of security tools and sensors
• Maintain versioned content, tests, and training materials

Skills

Cybersecurity engineering

Detection engineering

Security analytics

SOC automation

Python scripting

PowerShell scripting

Education

Bachelor's degree in cybersecurity, computer science, software engineering, information systems, or a related field

Tools

Splunk SPL

Microsoft Sentinel KQL

Sigma

YARA

SOAR platforms

AWS CloudTrail

Azure Monitor

Microsoft 365 audit logs

GCIA

GCDA

GCED

Splunk

Microsoft Certifications

Job description

Zermount, Inc. is seeking a Detection and Automation Engineer to design, implement, and validate analytics, detections, dashboards, and automation for security operations center support.

The role combines hands-on engineering with disciplined validation, documentation, troubleshooting, and collaboration across analysts, threat hunters, intelligence personnel, platform engineers, and operational stakeholders.