Remote DFIR & Detection Engineer — 12-Month Contract

Gravity IT Resources; Northern (KY); Hybrid; USD 120,000 - 150,000; Full time

Job summary

Gravity IT Resources seeks a Senior Security Engineer with strong DFIR, detection engineering, security automation and cloud security. This hands-on role supports a large-scale security operations environment, collaborating with incident response and DLP teams to investigate activity, improve visibility, and build detections.

The position is a 12-month remote contract. Central Time preferred, Eastern Time considered.

Qualifications

• 4+ years of cybersecurity experience including hands-on detection engineering or DFIR.
• Proven experience with Splunk and SPL.
• Hands-on CrowdStrike experience.
• Experience investigating security incidents and analyzing telemetry.
• Python scripting or security automation experience.
• Experience with AWS security logs or cloud investigations.
• Strong detection engineering concepts and monitoring.
• Ability to independently investigate complex technical problems.

Responsibilities

• Perform advanced incident investigations across endpoint, cloud, malware, identity and telemetry.
• Serve as escalation resource for complex security incidents and forensics.
• Develop and tune detections using Splunk and other security platforms.
• Write and optimize SPL queries for detection and analytics.
• Use CrowdStrike telemetry to investigate suspicious activity.
• Analyze AWS security data across cloud environments.
• Build Python scripts and API-based automation to improve workflows.
• Onboard additional security data sources to improve visibility and response.
• Partner with DLP teams on data movement and web activity detections.
• Reduce noise and improve signal quality across high-volume platforms.
• Support secure telemetry movement through cloud pipelines.
• Evaluate AI-assisted security capabilities where appropriate.

Skills

DFIR

Detection engineering

Incident investigations

Python scripting

Cloud security

Tools

Splunk

SPL

CrowdStrike

AWS logging

APIs

Job description

Gravity IT Resources seeks a Senior Security Engineer with strong DFIR, detection engineering, security automation and cloud security. This hands-on role supports a large-scale security operations environment, collaborating with incident response and DLP teams to investigate activity, improve visibility, and build detections.

The position is a 12-month remote contract. Central Time preferred, Eastern Time considered.