Senior Detection Engineer: Threat Hunting & Automation

Solutions3 LLC; Arlington (VA); Presencial; USD 131 000 - 150 000; Tempo integral

Resumo da oferta

Solutions³ LLC is seeking a Senior Detection Engineer to lead threat hunting and develop validated detections across endpoint, network, identity, and cloud telemetry. Role focuses on turning hunt findings into scalable analytics, detections, and automation for faster, repeatable operations. Candidates should have 10+ years of directly relevant experience and TS/SCI eligibility.

The role is onsite in Arlington, VA for a U.S. Government customer, requiring US citizenship and DHS suitability.

Qualificações

• Senior-level experience in threat hunting, detection engineering, or related defensive operations.
• Ability to translate hunt findings into validated detections and automation.
• Strong knowledge of telemetry across endpoints, networks, identity, and cloud.

Responsabilidades

• Develop and test hypotheses to uncover persistence, privilege escalation, credential access, and movement techniques.
• Build behavioral analytics, rules, signatures, and queries across telemetry sources.
• Translate hunt methods and incident results into reusable detections with clear guidance.
• Test detections against realistic activity and validate efficiencies.
• Analyze false positives/negatives and improve alert fidelity and context.
• Assess sensors, tools, data quality, and coordinate remediation with teams.
• Develop automation for enrichment, query execution, and detection validation.
• Maintain versioning, peer reviews, and governance for detection content.
• Collaborate with hunters, responders, analysts, and engineers to integrate detections.
• Measure coverage, determine gaps, and communicate operational impact.

Conhecimentos

Threat hunting leadership

Detection engineering

Incident response

Hypothesis development

MITRE ATT&CK mapping

Formação académica

Bachelor’s degree in Engineering, CS, Cybersecurity, IS, or related field

Master’s degree preferred

GIAC GCDA / GCFA / GDAT / GCIA / GCIH / GCTI / SC-200 / CISSP certifications (listed)

Ferramentas

CrowdStrike Falcon

Microsoft Defender

Cortex XDR

SentinelOne

Elastic

Splunk

Sigma

Descrição da oferta de emprego

Solutions³ LLC is seeking a Senior Detection Engineer to lead threat hunting and develop validated detections across endpoint, network, identity, and cloud telemetry. Role focuses on turning hunt findings into scalable analytics, detections, and automation for faster, repeatable operations. Candidates should have 10+ years of directly relevant experience and TS/SCI eligibility.

The role is onsite in Arlington, VA for a U.S. Government customer, requiring US citizenship and DHS suitability.