Remote SIEM Detection Engineer — Growth & Equity

CloudDevs; Northern (KY); Hybrid; USD 112,000 - 162,000; Full time

Benefits offered by this job

Health benefits

Unlimited PTO

Equity

Parental leave

Job summary

Expel is seeking a detection engineer to join our growing professional services function. You will craft and tune detection content across SIEM platforms, reduce alert noise, and help customers optimize ingestion and costs.

This remote US role offers opportunity to lead and shape detection strategy with hands-on work across Splunk, Microsoft Sentinel, and CrowdStrike NG SIEM, plus AI-assisted tooling. Collaborate with SOC, Sales, and Customer Success.

Qualifications

• 3+ years of detection and response tooling experience (SIEM/SOAR/EDR).
• 3+ years writing, deploying, and tuning detections from research against common datasets (Windows Event Logs, CloudTrail, etc.).
• Experience translating detection logic between SIEM platforms and log source re-pointing.

Responsibilities

• Deliver end-to-end professional services engagements, including detection strategy and SIEM optimization.
• Develop and validate detections for defined security use cases across environments.
• Tune detections to reduce alert noise and improve ingestion efficiency.
• Translate detection logic between SIEM platforms and author parsers for various log sources.
• Collaborate with Detection Engineering and SOC to hand off environments for co-managed operations.

Skills

SIEM expertise

Detection engineering

Python/Go

Git/GitHub

Threat detection

Education

Bachelor’s degree in CS or InfoSec

Tools

Splunk

Microsoft Sentinel

CrowdStrike NG SIEM

Job description

Expel is seeking a detection engineer to join our growing professional services function. You will craft and tune detection content across SIEM platforms, reduce alert noise, and help customers optimize ingestion and costs.

This remote US role offers opportunity to lead and shape detection strategy with hands-on work across Splunk, Microsoft Sentinel, and CrowdStrike NG SIEM, plus AI-assisted tooling. Collaborate with SOC, Sales, and Customer Success.