Senior Detection Engineer — Remote Opportunity

SAIC; Tennessee; Híbrido; USD 60.000 - 100.000; Jornada completa

Descripción de la vacante

SAIC in Oak Ridge, Tennessee, seeks a Senior Detection Engineer to join the ESOC Detection Engineering Team. You will build high‑fidelity detections across SIEM, EDR, and telemetry to sustain enterprise visibility and rapid response.

The Senior Analyst will mentor analysts, tune detections, translate CTI into practical rules, and partner with CTI, OSO, and Purple Team to validate coverage, while supporting 24/7 operations as required.

Formación

• Bachelor’s degree with 5+ years related experience or Master’s with 3+ years
• Minimum 3 years of cybersecurity operations experience with enterprise SIEM Splunk
• Must have CySA+, SSCP, or equivalent
• Must obtain Splunk Certified Cybersecurity Defense Engineer within six months of hire

Responsabilidades

• Operationally develop, deploy, and maintain high‑fidelity detections across SIEM, EDR, and other security telemetry platforms to support continuous monitoring and response.
• Validate alerts with Detection & Response team and refine workflows to align with operational needs.
• Provide rapid detection-focused support during active incidents, including tuning recommendations and data enrichment.
• Continuously tune and optimize detections to improve fidelity and reduce false positives.
• Perform advanced threat and telemetry analysis to confirm detection performance and coverage of emerging threats.
• Translate observed CTI into reliable, actionable detections aligned with DCO requirements.
• Collaborate with CTI, OSO, and Purple‑Team operators to validate logic and refine monitoring gaps.
• Convert threat-hunting findings into improved detection logic and monitoring enhancements.
• Maintain documentation for detection logic, tuning actions, and workflows to support repeatability.
• Mentor Detection Engineering analysts and support capability development within ESOC/DCO

Conocimientos

Splunk SPL

Python

Leadership

Self-motivated

Excellent communication

Multitasking

Educación

Bachelor's degree + 5+ years experience / Master’s + 3+ years

CySA+, SSCP, or equivalent

Splunk Certified Cybersecurity Defense Engineer within 6 months

Descripción del empleo

SAIC in Oak Ridge, Tennessee, seeks a Senior Detection Engineer to join the ESOC Detection Engineering Team. You will build high‑fidelity detections across SIEM, EDR, and telemetry to sustain enterprise visibility and rapid response.

The Senior Analyst will mentor analysts, tune detections, translate CTI into practical rules, and partner with CTI, OSO, and Purple Team to validate coverage, while supporting 24/7 operations as required.