Detection Engineer, Falcon Complete

Jobgether; Oregon; Hybrid; USD 100,000 - 150,000; Full time

Benefits offered by this job

Health insurance

401(k) plan

Paid time off

Parental leave

Wellness programs

Professional development

Remote-friendly within US

Job summary

Jobgether is seeking a Detection Engineer to join a remote US-based team focused on building and maintaining advanced detections for a next-generation SIEM platform. You will translate threat intelligence into actionable detection rules and automate workflows at scale, collaborating with security researchers, engineers, and operations teams.

The role emphasizes threat hunting, Python scripting, and AI-assisted tooling to accelerate research, with opportunities for growth, equity, and

Qualifications

• 3+ years of experience as a Detection Engineer or similar cybersecurity role.
• Experience developing, maintaining, or optimizing security detection rules.
• Hands-on with large datasets and multiple security technologies.

Responsibilities

• Develop, test, deploy, and maintain high-fidelity detection rules for a Next-Gen SIEM platform.
• Conduct threat research and proactive threat hunting to identify TTPs.
• Apply CI/CD best practices to manage detection rules as code.
• Collaborate with SIEM architects to optimize data ingestion and parsing.
• Build tools and automation to scale detection workflows.

Skills

Threat research

Threat hunting

Analytical skills

Collaboration

CI/CD

Python scripting

AI workflows

Communication

Prioritization

Tools

LogScale

Splunk

Sumo Logic

Microsoft Sentinel

IBM QRadar

LogRhythm

Job description

Our partner is looking for a Detection Engineer, Falcon Complete based in the United States. As a Detection Engineer, you will play a critical role in developing and maintaining advanced security detections that power large-scale managed detection and response operations. You will join a specialized engineering team focused on identifying emerging cyber threats and transforming threat intelligence into high-quality, actionable detection rules. Working with extensive datasets and diverse third-party security technologies, you will help close detection gaps and strengthen protection against increasingly sophisticated adversaries. You will contribute throughout the detection engineering lifecycle, from threat research and data analysis to rule development, testing, deployment, and automation. You will also leverage artificial intelligence, large language models, and modern development tools to accelerate detection workflows and improve accuracy at scale. This remote opportunity offers the chance to collaborate with experienced security professionals and make a meaningful impact on global cybersecurity operations.

Accountabilities

• Conduct threat research and proactive threat hunting to identify emerging adversary tactics, techniques, and procedures (TTPs), translating intelligence findings into effective detection strategies.
• Develop, test, deploy, and maintain high-fidelity detection rules for a Next-Generation SIEM platform, supporting advanced managed detection and response capabilities.
• Respond rapidly to emerging threats, including zero-day vulnerabilities and newly discovered attack techniques, by creating and improving relevant detection coverage.
• Analyze security events and large datasets across multiple third-party technologies and data sources to identify suspicious activity, attack patterns, and detection gaps.
• Perform code reviews, validation, and testing to ensure detection rules meet established quality, accuracy, reliability, and performance standards before large-scale deployment.
• Apply Continuous Integration and Continuous Delivery (CI/CD) best practices to manage and deploy detection rules as code.
• Contribute to an AI-powered detection engineering ecosystem by leveraging large language models (LLMs), AI coding agents, and intelligent automation tools to accelerate threat research, rule development, and operational workflows.
• Collaborate with SIEM architects and engineering teams to establish best practices for data ingestion, parsing, and normalization using common event schemas.
• Build, improve, and maintain internal utilities, tools, and automation solutions that help managed security teams operate more efficiently and at scale.
• Develop and maintain technical documentation, operational processes, and engineering standards to support consistency and continuous improvement.
• Participate in a Detection Engineer on-call rotation, providing technical support and responding to operational requirements when needed.

Requirements

• At least 3 years of professional experience as a Detection Engineer, Security Engineer, Security Analyst, Threat Intelligence Analyst, or in a closely related cybersecurity role.
• Strong understanding of current cybersecurity threats, adversary behaviors, attack techniques, and methods for detecting malicious activity using SIEM technologies.
• Practical experience developing, maintaining, or optimizing security detection rules and analyzing security events.
• Experience working with large datasets from multiple vendors, platforms, and security technologies.
• Hands-on familiarity with SIEM solutions such as LogScale, Splunk, Sumo Logic, Microsoft Sentinel, IBM QRadar, or LogRhythm.
• Strong analytical and investigative skills, with the ability to identify threat patterns, assess security telemetry, and translate findings into actionable detection logic.
• Experience with Python or other scripting languages for automation, data processing, and security engineering tasks is strongly preferred.
• Familiarity with large language models (LLMs), AI-powered development tools, and AI coding agents.
• Hands-on experience building or integrating AI-assisted workflows is an advantage.
• Proven experience using AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency, and drive business outcomes.
• Knowledge of software development practices, including code reviews, testing, version control, and CI/CD methodologies.
• Relevant industry certifications are desirable, including GCFA, GCDA, GCIH, or other recognized cybersecurity qualifications.
• Strong curiosity, initiative, and a self-motivated approach to investigating complex security challenges.
• High standards of technical quality, attention to detail, and commitment to producing reliable and effective detection solutions.
• Excellent collaboration and communication skills, with the ability to work effectively with security researchers, engineers, architects, and managed security operations teams.
• Ability to manage priorities, adapt to evolving threats, and contribute effectively in a fast-paced, remote working environment.

Benefits

• Competitive compensation:
• Annual base salary ranging from $100,000 to $150,000, depending on relevant experience, qualifications, skills, and location.
• Eligibility for additional performance-based bonuses and equity grants.
• Comprehensive healthcare coverage, including health insurance.
• Retirement savings benefits through a 401(k) plan.
• Competitive paid time off and vacation policies to support work-life balance.
• Paid parental and adoption leave.
• Comprehensive physical and mental wellness programs.
• Professional development and career advancement opportunities for employees at every level.
• Opportunities to expand technical expertise through continuous learning, cybersecurity training and exposure to advanced security technologies.
• Employee resource networks, regional communities, and volunteering opportunities that encourage professional connections and collaboration.
• Flexible remote working arrangements within the United States.
• An inclusive, collaborative, and innovation-driven working environment that encourages autonomy, experimentation, and continuous improvement.