Remote Cyber Security Engineer: Threat Hunting & Detection

GCS Recruitment; United States; Remote; USD 161,000 - 212,000; Full time

Benefits offered by this job

Fully remote contract engagement

Long-term programme of work

Job summary

GCS Recruitment is seeking a Cyber Security Engineer (Detection Engineering & Threat Hunting) for a fully remote contract engagement. The role focuses on proactive defence, engineering-led security operations, and AI-enabled capabilities in a mature cloud-first environment.

You’ll design detections, automate responses, hunt for emerging threats, and collaborate with stakeholders across technology and business to raise security maturity in a global enterprise.

Qualifications

• Extensive hands-on experience in Security Engineering, Security Operations, Detection Engineering, Threat Hunting or Incident Response.
• Strong hands-on experience with modern SIEM and/or XDR technologies.
• Expertise building/d tuning detections using KQL, SPL, or CrowdStrike Query Language.
• Experience securing and investigating threats within Microsoft 365 environments.
• Knowledge of EDR technologies across Windows and macOS.
• Scripting and automation using Python and/or PowerShell.
• Experience using AI-enabled security tooling and AI-assisted SOC capabilities.
• Understanding of MITRE ATT&CK and NIST CSF frameworks.

Responsibilities

• Design, build and optimise detections across SIEM and XDR platforms.
• Develop and tune detection logic using KQL, SPL or similar languages.
• Improve visibility across endpoints, cloud, identity and SaaS environments.
• Enhance alert quality and reduce false positives.
• Map detections to MITRE ATT&CK techniques.
• Build monitoring for AI-related threats.

Skills

SIEM/XDR engineering

Threat hunting

Detection engineering

KQL/SPL

CrowdStrike queries

Python

PowerShell

MITRE ATT&CK

Tools

EDR

Microsoft 365 Security

Cloud Security

Job description

GCS Recruitment is seeking a Cyber Security Engineer (Detection Engineering & Threat Hunting) for a fully remote contract engagement. The role focuses on proactive defence, engineering-led security operations, and AI-enabled capabilities in a mature cloud-first environment.

You’ll design detections, automate responses, hunt for emerging threats, and collaborate with stakeholders across technology and business to raise security maturity in a global enterprise.