Detection Engineer: SIEM & Threat Analytics

CBIZ; Independence Township (OH); On-site; USD 110,000 - 170,000; Full time

Job summary

CBIZ is seeking a Detection Engineer to design, test, and maintain detection content across SIEM, XDR, NDR, identity, email, endpoint, network, cloud, and application security platforms in a large enterprise environment.

You will translate threat intelligence into prioritized use cases, tune detections to reduce false positives, and own the detection lifecycle from intake to retirement while collaborating with security, IT, and engineering teams.

Qualifications

• Bachelor's degree or equivalent required.
• 1 year related experience minimum.
• Experience with enterprise SIEM and threat detection.

Responsibilities

• Design and maintain detections across SIEM/XDR/NDR and cloud platforms.
• Validate detections with testing, historical logs, and exercises.
• Own the detection lifecycle from intake to retirement.
• Collaborate with cloud, identity, endpoint, network, and application teams.
• Support on-call rotations as needed.

Skills

PowerShell

Python

Linux CLI

SIEM analytics

Threat hunting

Incident response

Cloud security

SOAR automation

Communication

Analytical

Education

Bachelor's degree or equivalent

Tools

Azure

AWS

Microsoft 365 Defender

SOAR platforms

Logging/Telemetry

Job description

CBIZ is seeking a Detection Engineer to design, test, and maintain detection content across SIEM, XDR, NDR, identity, email, endpoint, network, cloud, and application security platforms in a large enterprise environment.

You will translate threat intelligence into prioritized use cases, tune detections to reduce false positives, and own the detection lifecycle from intake to retirement while collaborating with security, IT, and engineering teams.