Hybrid Detection Engineer: SIEM & SOAR Automation

Olympus Solutions Inc.; Memphis (TN); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical, Dental, and Vision

Work-Life Balance

Career Development

401(k) plan with match

Referral bonuses

Job summary

Olympus Solutions, Inc. is seeking a Detection Engineer for our 24x7 Security Operations Center supporting a large federal civilian agency. The role is hybrid in the Lanham, MD or Memphis, TN area, requiring U.S.

citizenship and eligibility for a federal suitability determination. Responsibilities include developing and tuning detections, dashboards, and scripts, aligning coverage to MITRE ATT&CK, and building SOAR playbooks.

Qualifications

• Bachelor’s degree and 10+ years of relevant experience; 3 extra years may substitute for the degree.
• Detection content engineering in an enterprise SIEM (SPL, KQL, Sigma, or similar).
• Python scripting for analytics and automation.
• SOAR playbook development.
• Working knowledge of MITRE ATT&CK.
• U.S. citizenship and ability to obtain federal suitability determination.

Responsibilities

• Develop, test, tune, and document custom detections, analytics, dashboards, and scripts.
• Tune sensors, rules, and alerts to raise detection fidelity and reduce false positives.
• Validate new detections before production use, and document dependencies, limitations, and maintenance needs.
• Map detection coverage to MITRE ATT&CK and close gaps identified through hunts, incidents, and threat intelligence.
• Build and maintain SOAR automation and response playbooks.
• Run periodic detection signature reviews and report on security device signature maintenance.

Skills

Detection engineering

Python scripting

SOAR playbooks

MITRE ATT&CK

SIEM tools (SPL/KQL/Sigma)

Education

Bachelor's degree in a relevant field

Tools

Splunk Enterprise Security

Splunk SOAR

Cribl

Git

CI/CD

Job description

Olympus Solutions, Inc. is seeking a Detection Engineer for our 24x7 Security Operations Center supporting a large federal civilian agency. The role is hybrid in the Lanham, MD or Memphis, TN area, requiring U.S.

citizenship and eligibility for a federal suitability determination. Responsibilities include developing and tuning detections, dashboards, and scripts, aligning coverage to MITRE ATT&CK, and building SOAR playbooks.