Senior Detection Engineer: SIEM & MITRE Threat Detection

S&P Global, Inc.; New York (NY); On-site; USD 140,000 - 155,000; Full time

Benefits offered by this job

Health & Wellness

Flexible Downtime

Continuous Learning

Invest in Your Future

Family Friendly Perks

Beyond the Basics

Job summary

S&P Global’s IT - SGA CYBER DEFENSE team seeks an experienced security engineer focused on detection engineering and threat hunting. You will develop advanced detection logic across SIEM, EDR, and cloud security tools, using MITRE ATT&CK to create actionable alerts and improve visibility.

Collaboration with red teams and automation is key. The role emphasizes Detec­tion-as-Code practices, mentoring, and driving security posture through innovative detection approaches.

Qualifications

• Bachelor’s degree or equivalent professional experience in security engineering.
• 5+ years in cybersecurity with at least 2+ years in detection engineering, threat hunting, or security operations.
• Proficiency in Python/PowerShell/Bash and SQL, SPL, KQL.
• Experience with SIEMs (Splunk, QRadar, MS Sentinel), EDRs (CrowdStrike, SentinelOne, Defender).
• Knowledge of MITRE ATT&CK and translating threat intel into detection rules.
• Experience with log analysis, telemetry data interpretation, and data flows across networks, OS, cloud, and identity providers.

Responsibilities

• Design and develop advanced detection logic for SIEM, EDR, cloud security tools, AI-powered security systems, and network monitoring.
• Map adversary tactics using MITRE ATT&CK to create real-time security alerts.
• Tune detection rules to reduce false positives while preserving high-fidelity threat detection.
• Apply Detection-as-Code with version control, automated testing, CI/CD, and peer reviews.
• Validate defenses through red-team collaboration and breach-simulation tools.
• Lead cross-functional initiatives and mentor junior team members.

Skills

Python

PowerShell

Bash

Education

Bachelor’s degree in CS/Cybersecurity

Tools

Splunk

QRadar

Microsoft Sentinel

CrowdStrike

SentinelOne

Microsoft Defender

Job description

S&P Global’s IT - SGA CYBER DEFENSE team seeks an experienced security engineer focused on detection engineering and threat hunting. You will develop advanced detection logic across SIEM, EDR, and cloud security tools, using MITRE ATT&CK to create actionable alerts and improve visibility.

Collaboration with red teams and automation is key. The role emphasizes Detec­tion-as-Code practices, mentoring, and driving security posture through innovative detection approaches.