Remote Cyber Threat Detection Engineer

GuidePoint Security LLC; Falls Church (VA); Remote; USD 140,000 - 180,000; Full time

Benefits offered by this job

Remote workforce (US)

Group medical insurance options

12 corporate holidays + FTO

Mobile phone & home internet allowance

Retirement plan after 2 months

Pet benefit option

Job summary

GuidePoint Security seeks an experienced Network Security Engineer to design, implement, and maintain automated detection and integration across enterprise security monitoring tools. You will collaborate with SOC, threat intel, and incident response teams to strengthen threat detection and response through automation.

The role emphasizes documentation, operationalization, and continuous improvement of detections and workflows in a remote-friendly, US-based environment.

Qualifications

• Eight or more years of relevant experience.
• Degree from an accredited college/university; if not in the field, four additional years of related experience.
• CompTIA Security+ (or equivalent baseline).
• One of: GCIA, GCIH, or CompTIA CySA+.
• Programming/scripting proficiency (e.g., Python, PowerShell).

Responsibilities

• Detection Engineering & Automation/SI: Build automation/SI and integration workflows.
• Security platform integration: Integrate SIEM, EDR, SOAR and threat intel into a cohesive detection architecture.
• Requirements-to-implementation: Translate security needs into technical specs and solutions.
• Testing & validation: Evaluate detections and workflows; drive improvements.
• Security data analysis: Analyze telemetry to identify anomalies and gaps.
• Documentation & sustainment: Create and maintain SOPs and runbooks.
• Cross-functional coordination: Align detections with threat priorities with SOC and IR teams.
• Emerging capability evaluation: Research new security/SI/ML capabilities.

Skills

Python

PowerShell

Automation

Security monitoring

Threat analysis

Education

Bachelor's degree in applicable field

Tools

ServiceNow

Windows Server

Active Directory

Unix/Linux

TLS/SSL tech

VMware

MSSQL

CCNA

NIST SP 800-53

Cloud platforms

Job description

GuidePoint Security seeks an experienced Network Security Engineer to design, implement, and maintain automated detection and integration across enterprise security monitoring tools. You will collaborate with SOC, threat intel, and incident response teams to strengthen threat detection and response through automation.

The role emphasizes documentation, operationalization, and continuous improvement of detections and workflows in a remote-friendly, US-based environment.