Senior Detection Engineer: Build Resilient Security Detections

Cedar Cares, Inc; Chicago (IL); Hybrid; USD 131,000 - 169,000; Full time

Benefits offered by this job

Hybrid work environment

Health, dental and vision benefits

401(k) match

Annual incentive compensation

Job summary

Cboe Global Markets is seeking a Senior Detection Engineer to join the Security Operations team. You will author, test, and maintain production detection logic across SIEM, EDR, identity, cloud, and network telemetry, building reusable test content and tooling to validate coverage.

You will collaborate with Threat Hunting, Incident Response and Security Engineering to ensure detections stay effective and quantitatively validated, with a focus on reducing false positives.

Qualifications

• 5+ years of hands-on security engineering experience with detections.
• Proficient in at least one detection language (KQL, Sigma, YARA-L).
• Knowledge of Windows/AD, Entra ID, cloud platforms, SaaS, containers.
• Able to read unfamiliar exploit/malware code and identify observable artifacts.
• Fluent in at least one tooling language: Python, Go, C#, PowerShell or Bash.
• Familiar with telemetry logs and where data is unreliable.
• Experience building/test infrastructure using virtualization/containers/CI/CD.
• Strong FP discipline and deterrence of false positives.
• Clear technical writing for engineers and analysts.

Responsibilities

• Write, tune, and maintain production detection logic across SIEM, EDR, identity, and cloud platforms.
• Validate each detection by executing the technique it targets.
• Build internal tooling to simulate adversary behavior for repeatable testing.
• Create reusable validation packages and automated regression tests.
• Operate sandbox and detonation infrastructure for safe technique development.
• Assess new proof-of-concept exploit code for telemetry and risk.
• Provide threat hunting validation content and seed artifacts.
• Automate repeatable work: scheduled executions, telemetry collection, and reporting.
• Apply AI tooling to shorten cycle time in triage and enrichment.
• Perform security testing of internal apps/APIs and translate findings.
• Support Incident Response with concrete attacker insights and detections.
• Document work for independent operation by others.

Skills

5+ years of security engineering

Detection query language

Windows & AD familiarity

Python / Go / C# / PowerShell

Telemetry & log analysis

Test infrastructure & CI/CD

Writing clear technical docs

Ethical standards & authorization

MITRE ATT&CK awareness

Education

Bachelor's degree or equivalent

Job description

Cboe Global Markets is seeking a Senior Detection Engineer to join the Security Operations team. You will author, test, and maintain production detection logic across SIEM, EDR, identity, cloud, and network telemetry, building reusable test content and tooling to validate coverage.

You will collaborate with Threat Hunting, Incident Response and Security Engineering to ensure detections stay effective and quantitatively validated, with a focus on reducing false positives.