Remote Detection Engineer: Threat Hunting & AI-Driven Security

GuidePoint Security LLC; United States; On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Remote work (US-based)

Medical insurance options

Dental insurance

12 holidays & Flexible Time Off

Phone + internet allowance

Retirement plan eligibility

Job summary

GuidePoint Security LLC is seeking technically exceptional engineers for its federal Presales team, focusing on threat detection across networks, cloud, and hybrid environments. The role involves blue-team and red-team concepts, extensive collaboration with data scientists, and engagement with government clients requiring high-security clearances.

You will implement architectures, analyze traffic, and develop signatures using Suricata while leveraging MITRE ATT&CK expertise to identify and

Qualifications

• Active TS/SCI clearance required.
• Strong background in network traffic analysis and threat detection.
• Hands-on experience with Suricata and signature-based detection.
• Knowledge of offensive security and simulated attacks.
• Familiarity with MITRE ATT&CK and attacker behaviors (Lateral movement, C2).
• Collaborate with data scientists and researchers on AI-driven detection.
• Understanding of networking protocols and OSI layers (L3-L7).

Responsibilities

• Implement and maintain architecture.
• Analyze network traffic to identify and document threat patterns.
• Develop and maintain network-based security signatures (e.g., Suricata).
• Use offensive security tools to simulate attacks and generate test traffic.
• Collaborate with data scientists and security researchers to improve detections.
• Continuously monitor and tune effectiveness of detections; adjust as needed.
• Contribute to threat hunting and incident response activities.

Skills

TS/SCI Clearance

Threat detection

Suricata

Offensive security

MITRE ATT&CK

Collaboration

Networking fundamentals

Education

Cybersecurity experience

OSCP/GCIA/GCDA/GSEC (optional)

Tools

Suricata

Job description

GuidePoint Security LLC is seeking technically exceptional engineers for its federal Presales team, focusing on threat detection across networks, cloud, and hybrid environments. The role involves blue-team and red-team concepts, extensive collaboration with data scientists, and engagement with government clients requiring high-security clearances.

You will implement architectures, analyze traffic, and develop signatures using Suricata while leveraging MITRE ATT&CK expertise to identify and