Detection Engineer - SIEM/SOAR Specialist (Onsite, OH)

Vernovis, Ltd.; Westerville (OH); On-site; USD 90,000 - 110,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Voluntary Short-Term Disability

Voluntary Long-Term Disability

Voluntary Life Insurance

401K

Job summary

Vernovis is seeking a Detection Engineer to design, implement, test, and tune detection rules within Google SecOps SIEM using YARA-L across endpoint, identity, network, cloud, and email telemetry. You will manage a detection backlog from development to deployment and tuning, aligning content to MITRE ATT&CK and building automated SOAR playbooks.

Ideal candidates have 3–5 years in security/detection engineering, hands-on SIEM rule development, and scripting (Python/PowerShell).

Qualifications

• 3–5 years of experience in security engineering, detection engineering, or a closely related security discipline.
• Hands-on experience developing detection rules within a SIEM using structured rule or query languages.
• Experience building automated workflows, playbooks, or integrations within a SOAR platform.
• Working proficiency with Python, PowerShell, or an equivalent scripting language.

Responsibilities

• Develop, test, deploy, and tune detection rules within Google SecOps SIEM using YARA-L across endpoint, identity, network, cloud, and email telemetry.
• Execute against a prioritized detection backlog, managing content through development, testing, validation, deployment, and tuning.
• Build new detection content based on threat intelligence, incident findings, platform changes, and identified security coverage gaps.
• Align detection content to the MITRE ATT&CK framework and follow detection-as-code practices.
• Build and configure SIEM data source integrations, connectors, log ingestion feeds, and parsing and normalization logic.
• Develop SOAR integrations and automated response playbooks to support triage, enrichment, response actions, and case management.
• Maintain and optimize Google SecOps SIEM/SOAR configurations while tracking detection effectiveness, alert fidelity, and coverage gaps.

Skills

Detection engineering

SIEM

SOAR integrations

Python/PowerShell

YARA-L

Threat intelligence

Tools

Google SecOps

Chronicle

YARA-L

SOAR

Job description

Vernovis is seeking a Detection Engineer to design, implement, test, and tune detection rules within Google SecOps SIEM using YARA-L across endpoint, identity, network, cloud, and email telemetry. You will manage a detection backlog from development to deployment and tuning, aligning content to MITRE ATT&CK and building automated SOAR playbooks.

Ideal candidates have 3–5 years in security/detection engineering, hands-on SIEM rule development, and scripting (Python/PowerShell).