Detection Engineer: SIEM/XDR & Cloud Security

Jobtailor; Arizona; On-site; USD 85,000 - 130,000; Full time

Job summary

Jobtailor is seeking a Detection Engineer to design, test, deploy, and maintain detections across enterprise SIEMs, XDR, and cloud platforms in a US-based role. You will translate threat intel into prioritized use cases and map coverage to adversary behaviors, owning the detection lifecycle end-to-end.

Responsibilities include on-call response, collaboration with security, IT, and cloud teams to onboard telemetry, validate coverage, and improve data quality.

Qualifications

• College degree or equivalent required.
• 1 year related experience.
• Ability to follow technical instructions and guidelines.
• Ability to document daily activities and system functions.
• Ability to travel as required by business and on-call availability.
• Proven hands-on experience creating and tuning detections in an enterprise SIEM, XDR, or comparable security analytics platform.
• Strong ability to analyze authentication, endpoint, network, email, cloud, and application telemetry and translate findings into durable detection logic.
• Hands-on experience with security investigations, incident response, log analysis, root-cause analysis, and remediation validation.
• Working knowledge of adversary behavior, detection lifecycle practices, and methods for validating detection coverage.
• Experience securing Azure and/or AWS environments and Microsoft 365 security capabilities.
• Experience with PKI and certificate-based authentication basics.

Responsibilities

• Design, test, deploy, document, and maintain detection content across SIEM, XDR, and cloud platforms.
• Translate threat intelligence and adversary techniques into prioritized detection use cases.
• Own the detection lifecycle from intake through retirement.
• Monitor detection health, data freshness, and alert quality; drive corrective action.
• Collaborate with cross-functional teams to onboard telemetry and ensure data quality.
• Perform root-cause analysis and validate remediation; improve detections and playbooks.
• Configure security controls across Azure, AWS, and Microsoft 365 environments.
• Participate in on-call rotation and after-hours response as needed.
• Use scripting and SOAR workflows to enrich alerts and automate response.

Skills

SIEM Detection Creation

Threat Intelligence Translation

Incident Response

PowerShell Scripting

Adversary Behavior Knowledge

Purple Teaming

Cloud Security

Azure Security

Education

Bachelor's degree or equivalent

Tools

SIEM Platforms

XDR Solutions

Azure Virtual Desktop

Microsoft 365

SOAR

Linux Command-Line

Job description

Jobtailor is seeking a Detection Engineer to design, test, deploy, and maintain detections across enterprise SIEMs, XDR, and cloud platforms in a US-based role. You will translate threat intel into prioritized use cases and map coverage to adversary behaviors, owning the detection lifecycle end-to-end.

Responsibilities include on-call response, collaboration with security, IT, and cloud teams to onboard telemetry, validate coverage, and improve data quality.