Detection Engineer

Ampcus, Inc; Jacksonville (FL); On-site; Full time

Job summary

A technology consulting firm is seeking a Detection Engineer in Jacksonville, FL. The role involves developing detection logic and working with security tools, requiring a Bachelor's in computer science and relevant industry certifications. Ideal candidates will possess at least two years of experience, strong technical skills in programming and security technologies, and a commitment to continuous learning and improvement. This position offers a chance to be at the forefront of security innovation.

Qualifications

• 2+ years of experience in security or network domains.
• Detailed knowledge of SIEM, EDR, and interacting with SOAR.
• Experience with Agile project development methodologies.

Responsibilities

• Develop custom detection logic across security tooling.
• Lead knowledge sharing sessions to enhance team skills.
• Shape data science and analytics efforts.

Skills

Experience with cloud-native data platforms

Expert proficiency with programming/scripting languages

Knowledge of security technologies

Adaptability to new languages and technologies

Strong understanding of security data lakes

Exploratory mindset and organization skills

Education

Bachelor's degree in computer science or information systems

GSEC, GCIH, CISSP or other security certifications

Tools

Python

R

PowerShell

SQL/KQL/LQL

Job description

Ampcus Inc. is a certified global provider of a broad range of Technology and Business consulting services. We are in search of a highly motivated candidate to join our talented Team.

Job Title: Detection Engineer

Location: Jacksonville, FL

Key Responsibilities

• Develop custom detection logic across SIEM, EDR, and other security tooling within a cutting-edge technology stack.
• Leverage threat modeling, detection engineering frameworks, and other creative methods to produce high-fidelity, investigation-worthy alerting.
• Work closely with cross-functional teams to create tailored, purpose-built security content.
• Lead technical knowledge sharing sessions to empower other teammates and stay on the forefront of content development & beyond.
• Possess a "detection-as-code" mindset to drive security content that is confidently deployed, continuously tested, and expertly tuned.
• Become immersed in our technology stack and logging to deliver solutions that push the boundaries of our security capabilities. Use this familiarity to present our security teams with the most relevant data to make quick and accurate decisions.
• Stay current with the latest detection engineering techniques, threat tactics, and industry knowledgebase.
• Shape the future of our data science and advanced analytic efforts.

Qualifications

• Bachelor's degree in computer science/information systems or the equivalent combination of education, training, or work experience. GSEC, GCIH, CISSP or other security or network certifications desired.
• Typically requires two or more years of experience with:
  • Experience with cloud-native data platforms, event streaming and analytic engines.
  • Knowledge of network design and data flow/pipelines.
  • Strong understanding of security data lakes, SIEM, EDR, and interacting with SOAR.
  • Expert proficiency with programming/scripting languages and query languages (Python, R, Powershell, SQL/KQL/LQL).
  • Adaptability to new languages and technologies.
  • Clean and thoughtful documentation to enable knowledge sharing and reference materials.
  • Agile project development methodologies and incident case management experience.
  • Familiarity with "detection-as-code" and implementing CI/CD in detection engineering.
  • Ability to identify untapped value, while also possessing a "consumer-first" mindset to build outstanding security content.
  • In-depth knowledge of security technologies (encryption, data protection, design, privilege access, etc.).
  • Exploratory mindset, ownership, time management, presentation and organizational skills. Passion for securing the mission, continuous learning and a growth mindset.

Ampcus is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veterans or individuals with disabilities.