Remote Detection Engineer — SQL-Based Network Security

Ocient; United States; On-site; USD 170,000 - 210,000; Full time

Job summary

Ocient is hiring a Network Infrastructure & Security Engineer to build detection content and strategies for network security. This role involves writing detections, managing data collection, and working hands-on with customer technical pilots.

The ideal candidate has 5+ years in network security engineering, strong SQL skills, and experience with network telemetry. This position is remote and requires innovative thinking in a startup-like environment.

Qualifications

• 5+ years in network security engineering or detection engineering roles.
• Strong experience with network telemetry like NetFlow/IPFIX and DNS logs.
• Demonstrated experience writing detection logic or correlation content.

Responsibilities

• Write detection logic and maintain SQL-based behavioral detections.
• Run technical programs day to day, hands-on with telemetry.
• Build datasets and demo environment for detections.

Skills

Network security engineering

Detection engineering

Data analysis

SQL proficiency

Knowledge of MITRE ATT&CK framework

Experience with SIEM platforms

Tools

Splunk

CrowdStrike

Zeek

Suricata

Job description

Ocient is hiring a Network Infrastructure & Security Engineer to build detection content and strategies for network security. This role involves writing detections, managing data collection, and working hands-on with customer technical pilots.

The ideal candidate has 5+ years in network security engineering, strong SQL skills, and experience with network telemetry. This position is remote and requires innovative thinking in a startup-like environment.