Lead Threat Detection Engineer - SIEM & Hunting

CVS Health; Carson City (NV); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Bonus program

Equity awards

Comprehensive benefits

Job summary

CVS Health is seeking a Staff Threat Detection Engineer to lead detection engineering, threat hunting, and offensive security initiatives. You will work with Security Operations to improve detections, validate controls, and drive purple team exercises.

Ideal candidates bring a strong background in SIEM, threat intelligence, and automation, with a track record of reducing dwell time and strengthening incident response capabilities.

Qualifications

• 7+ years in threat detection, hunting, penetration testing, or offensive security.

Responsibilities

• Develop, deploy, and optimize detection rules across SIEM platforms (Microsoft Sentinel, Splunk).
• Conduct threat hunting using Defender for Endpoint, CrowdStrike, and other SOC tools.
• Design and execute adversary emulation scenarios to assess detection and response effectiveness.
• Produce detailed reports with findings and actionable recommendations.

Skills

Threat detection

Microsoft security tools

Automation scripting

Education

Bachelor's degree or equivalent

Tools

Microsoft Defender for Endpoint

Microsoft Sentinel

CrowdStrike

Splunk

KQL

SPL

Python

PowerShell

Job description

CVS Health is seeking a Staff Threat Detection Engineer to lead detection engineering, threat hunting, and offensive security initiatives. You will work with Security Operations to improve detections, validate controls, and drive purple team exercises.

Ideal candidates bring a strong background in SIEM, threat intelligence, and automation, with a track record of reducing dwell time and strengthening incident response capabilities.