Detection Engineer, Cyber Operate (Managed Services)

Deloitte France; Indianapolis (IN); Presencial; USD 83 000 - 163 000; Tempo integral

Resumo da oferta

Deloitte is seeking a Managed Services Engineer II to join our Cyber Operate Offering. You will help develop, test, tune, and maintain detections that support client security operations across cloud and on-prem environments.

Role requires collaboration with SOC analysts, threat hunters, and incident responders to ensure robust threat coverage. The team focuses on threat intelligence review, detection rule creation, and continuous improvement to reduce false positives while maintaining strong

Qualificações

• Bachelor's degree in Computer Science, Information Technology, or Computer Engineering.
• 2+ years of cybersecurity, security operations, threat intelligence, networking, or systems administration.

Responsabilidades

• Review threat intelligence, emerging threats, attack techniques, vulnerabilities, and historical incident information to identify detection requirements.
• Develop, maintain, and update detection rules, queries, signatures, and indicators of compromise for security monitoring platforms.
• Configure and tune detections; identify false positives; and recommend improvements that maintain effective threat coverage.
• Test and validate detection rules against known threats and attack scenarios; document test results, configuration changes, and detection logic.
• Monitor detection performance; investigate gaps or unexpected results; support incident-response research; and collaborate with security operations center analysts, threat hunters, incident responders, Platform Operations Engineers, and client cybersecurity teams.

Conhecimentos

Independent work

Team collaboration

Effective communication

Attention to detail

Project leadership

Task prioritization

Interpersonal skills

Deadline compliance

Guidance to others

Security mindset

Formação académica

Bachelor's degree in Computer Science / Information Technology / Computer Engineering

Ferramentas

Git

Microsoft Sentinel

Splunk

Sigma rules

YARA rules

Kusto Query Language (KQL)

Cloud platforms (AWS/Azure/GCP)

Splunk Processing Language (SPL)

Descrição da oferta de emprego

Deloitte is seeking a Managed Services Engineer II to join our Cyber Operate Offering. You will help develop, test, tune, and maintain detections that support client security operations across cloud and on-prem environments.

Role requires collaboration with SOC analysts, threat hunters, and incident responders to ensure robust threat coverage. The team focuses on threat intelligence review, detection rule creation, and continuous improvement to reduce false positives while maintaining strong