Senior Detection Engineer: SIEM, MITRE & AI Security

Spglobal; New York (NY); On-site; USD 140,000 - 155,000; Full time

Benefits offered by this job

Health care

Flexible time off

Continuous learning

Retirement planning

Student loan contribution

Family perks

Retail discounts

Job summary

S&P Global's IT – SGA CYBER DEFENSE team is seeking a senior detection engineer to design and tune detection logic for SIEMs, EDRs, cloud security tools, and AI-powered systems. You’ll translate threat intel into real-time alerts and reduce false positives across networks, endpoints, and cloud workloads.

You will collaborate with red teams, apply MITRE ATT&CK mappings, and mentor junior staff while driving Detection-as-Code with version control, CI/CD, and automated testing frameworks.

Qualifications

• Bachelor’s degree or equivalent professional experience in security engineering.
• 5 years of hands-on cybersecurity experience with at least 2 years in detection engineering, threat hunting, or security operations.
• Proficiency in Python/PowerShell/Bash and SQL/SPL/KQL for detection logic and data queries.
• Strong experience with SIEM (Splunk/QRadar/Microsoft Sentinel), EDR (CrowdStrike/SentinelOne/Microsoft Defender), and network monitoring.
• Knowledge of MITRE ATT&CK and translating threat intelligence into rules and alerts.
• Experience with log analysis, telemetry data interpretation, and data flows across networks, endpoints, cloud, and identity.

Responsibilities

• Design and develop advanced detection logic for SIEM, EDR, cloud security, AI security systems, and network monitoring.
• Map adversary techniques using MITRE ATT&CK to create real-time alerts and improve threat visibility.
• Tune detection rules to minimize false positives while preserving high-fidelity detection.
• Apply Detection-as-Code practices with version control, automated testing, and CI/CD for detection rules.
• Validate defenses with red teams and breach simulations to identify coverage gaps and improve detection.
• Lead cross-functional initiatives and mentor junior team members to strengthen security posture.

Skills

Python

PowerShell

Bash

SQL

SPL (Splunk)

KQL

MITRE ATT&CK

SIEM

EDR

Threat hunting

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Technology

Tools

Splunk

QRadar

Microsoft Sentinel

Job description

S&P Global's IT – SGA CYBER DEFENSE team is seeking a senior detection engineer to design and tune detection logic for SIEMs, EDRs, cloud security tools, and AI-powered systems. You’ll translate threat intel into real-time alerts and reduce false positives across networks, endpoints, and cloud workloads.

You will collaborate with red teams, apply MITRE ATT&CK mappings, and mentor junior staff while driving Detection-as-Code with version control, CI/CD, and automated testing frameworks.