Remote Detection Engineer: Splunk & Threat Hunting

Blu Omega LLC; Rockville (MD); Remote; USD 70,000 - 90,000; Full time

Job summary

Blu Omega LLC is seeking a Detection Engineer for a fully remote role supporting a federal program focused on protecting critical health systems and data. The position involves cybersecurity monitoring, detection engineering, and collaboration with a mission-driven team.

The role requires experience in security operations, detecting threats, and implementing detections within Splunk. NIH Public Trust clearance is noted as a requirement, with opportunities to influence threat detection across the

Qualifications

• 2+ years of cybersecurity experience, including security monitoring, SOC operations, SIEM, threat hunting, incident response, or detection engineering.
• Experience working with Splunk or a comparable SIEM platform.
• Familiarity with SPL and security-focused searches or queries.
• Understanding of common cybersecurity threats and attacker techniques.
• Experience reviewing or investigating cybersecurity alerts.
• Strong analytical, troubleshooting, and communication skills.

Responsibilities

• Develop and maintain security alerts and detection rules within Splunk.
• Write and modify SPL queries to identify suspicious or potentially malicious activity.
• Create and maintain Splunk dashboards, reports, and security analytics.
• Review and tune existing detections to improve accuracy and reduce false positives.
• Support phishing detection and analysis using Cofense Triage or similar tools.
• Assist with the development and maintenance of YARA rules.
• Use SnapAttack and other security tools to support detection development and analysis.
• Leverage built-in security analytics and detections across cybersecurity tools.
• Support threat hunting and investigation of suspicious activity.
• Apply MITRE ATT&CK concepts to understand attacker behaviors and detection coverage.
• Work with SOC analysts, incident responders, and other cybersecurity team members to improve monitoring and detection capabilities.
• Document detection rules, queries, dashboards, and investigative procedures.

Skills

Analytical skills

Troubleshooting

Communication skills

Tools

Splunk

SPL

Cofense Triage

YARA

SnapAttack

MITRE ATT&CK

Job description

Blu Omega LLC is seeking a Detection Engineer for a fully remote role supporting a federal program focused on protecting critical health systems and data. The position involves cybersecurity monitoring, detection engineering, and collaboration with a mission-driven team.

The role requires experience in security operations, detecting threats, and implementing detections within Splunk. NIH Public Trust clearance is noted as a requirement, with opportunities to influence threat detection across the