Senior Detection Engineer | SIEM & Threat Analytics (Remote)

SAIC; Oregon; Hybrid; USD 130,000 - 190,000; Full time

Job summary

SAIC is seeking a Senior Detection Engineer to enhance enterprise threat detection across SIEM, EDR, and other telemetry. You will develop high‑fidelity detections, collaborate with cross‑functional teams, and mentor junior analysts to strengthen ESOC readiness.

The role requires advanced Splunk and Python skills, leadership, and the ability to operate in a 4×10 schedule with potential 24/7 support. A strong security operations background is essential for success.

Qualifications

• Bachelor's degree with 5+ years in cyber ops, or Master's with 3+ years.
• Minimum 3 years cybersecurity operations experience with Splunk.
• Certifications: CySA+, SSCP, or equivalent; Splunk certification within 6 months.

Responsibilities

• Operationally develop, deploy, and maintain high‑fidelity detections across SIEM, EDR, and telemetry platforms.
• Validate alerts, refine workflows, and ensure detections meet operational needs.
• Provide rapid detection support during active incidents with tuning and guidance.
• Tune and optimize to reduce false positives and close visibility gaps enterprise‑wide.
• Mentor Detection Engineering analysts and support capability development.

Skills

Splunk SPL

Python security

Leadership

Multitasking

Communication

Self-motivated

Education

Bachelor's degree

Master's degree

Tools

Splunk

Python

Job description

SAIC is seeking a Senior Detection Engineer to enhance enterprise threat detection across SIEM, EDR, and other telemetry. You will develop high‑fidelity detections, collaborate with cross‑functional teams, and mentor junior analysts to strengthen ESOC readiness.

The role requires advanced Splunk and Python skills, leadership, and the ability to operate in a 4×10 schedule with potential 24/7 support. A strong security operations background is essential for success.