Remote Detection Engineer: Build & Automate Detections

Binary-Defense; Houston (TX); Remote; USD 110,000 - 170,000; Full time

Benefits offered by this job

Medical, dental, and vision coverage

401k match

Remote-friendly work environment

Training opportunities

Job summary

Binary Defense is seeking an experienced Detection Engineer to join our Detection Engineering team in a hands-on role. You will build, deploy, and maintain detections across SIEMs, EDRs, and cloud environments, with a focus on automation and scale.

You will work in a detection-as-code model, using Python and REST APIs to remove GUI dependencies, map detections to MITRE ATT&CK techniques, and collaborate with Threat Intel, IR, and Cloud Security to improve coverage and effectiveness.

Qualifications

• 2–5+ years in detection engineering, threat hunting, or incident response.
• Proficient in Python and REST APIs for automating workflows.
• Experience writing and tuning Sigma, YARA-L, Splunk SPL, KQL or XQL.
• Experience with telemetry sources: Windows event logs, Sysmon, cloud logs.
• Familiar with MITRE ATT&CK mapping.
• Willingness to learn new security tech and work in a fast-paced environment.
• Ability to work cross-functionally with Threat Intel, Incident Response, and Cloud Security.

Responsibilities

• Design and implement detections across SIEM and EDR.
• Develop and operationalize detection logic in YAML/Sigma/YARA-L.
• Automate rule deployment, validation, and telemetry inspection via APIs.
• Collaborate with Threat Intel, Incident Response, and Cloud Security teams.
• Contribute to threat modeling to identify coverage gaps.
• Analyze telemetry sources to identify detection use cases.
• Participate in adversary simulation and detection validation efforts.
• Document detection logic and guidance.
• Improve detection engineering workflows, tooling, and standards.

Skills

Python

REST APIs

Sigma

YARA-L

Splunk SPL

KQL

XQL

MITRE ATT&CK

Threat Modeling

Detection as Code

CI/CD

Git

Telemetry Analysis

Windows Event Logs

Sysmon

Tools

Cortex XDR

XSIAM

Job description

Binary Defense is seeking an experienced Detection Engineer to join our Detection Engineering team in a hands-on role. You will build, deploy, and maintain detections across SIEMs, EDRs, and cloud environments, with a focus on automation and scale.

You will work in a detection-as-code model, using Python and REST APIs to remove GUI dependencies, map detections to MITRE ATT&CK techniques, and collaborate with Threat Intel, IR, and Cloud Security to improve coverage and effectiveness.