Remote Senior Threat Detection Engineer

SAIC; United States; À distance; USD 60 000 - 100 000; Plein temps

Résumé du poste

SAIC is seeking a Senior Detection Engineer to design and operationalize high‑fidelity detections across SIEM, EDR, and telemetry platforms. The role involves mentoring analysts and coordinating with CTI, OSO, and Purple-Team teams to strengthen the organization’s defensive posture.

Remote work is available for qualified candidates; the position requires 4x10 schedules with on‑call support as needed and a strong emphasis on collaboration and continuous improvement within the ESOC/DCO framework.

Qualifications

• Bachelor’s degree and 5+ years related experience, or a Master’s degree and 3+ years
• Minimum 3 years of cybersecurity operations with Splunk enterprise SIEM
• Certifications: CySA+, SSCP, or equivalent; Splunk Certified Cybersecurity Defense Engineer within 6 months

Responsabilités

• Develop, deploy, and maintain high-fidelity detections across SIEM/EDR and telemetry
• Collaborate with Detection & Response to validate alerts and optimize workflows
• Provide rapid detection-focused support during incidents and tuning guidance
• Tune detections to reduce false positives and cover new threats
• Document detection logic, workflows, and standards for repeatability
• Mentor Detection Engineering analysts and support capability development

Connaissances

Splunk SPL

Python

Leadership

Communication

Formation

Bachelor's degree

Master's degree

Outils

Splunk

Description du poste

SAIC is seeking a Senior Detection Engineer to design and operationalize high‑fidelity detections across SIEM, EDR, and telemetry platforms. The role involves mentoring analysts and coordinating with CTI, OSO, and Purple-Team teams to strengthen the organization’s defensive posture.

Remote work is available for qualified candidates; the position requires 4x10 schedules with on‑call support as needed and a strong emphasis on collaboration and continuous improvement within the ESOC/DCO framework.