Senior Detection Engineering Lead - Remote ET Hours Travel

aspenviewtech; United States; Remote; USD 140,000 - 210,000; Full time

Benefits offered by this job

Remote work (US)

ET hours alignment

Travel to client/nearshore locations

Visa sponsorship not offered

Job summary

AspenView Tech is seeking a senior detection engineering lead to own the detection program for a large U.S. consumer lender. The role blends hands‑on rule authoring with people leadership across identity, endpoint, and cloud telemetry, reporting to client security leadership.

You will guide two senior detection engineers, maintain detections as code, and deliver MITRE ATT&CK coverage with risk guidance and gaps analysis for the client.

Qualifications

• Several years hands-on experience writing and tuning production detections on a SIEM or analytics platform.
• Strong grasp of log pipelines and data quality from source to alert.
• Detections treated as code with versioning, peer review, and pre-release testing.
• Experience mentoring or leading engineers remotely with candid reviews.
• Comfort presenting detection coverage, gaps, and risks to client leadership.

Responsibilities

• Manage the full detection inventory with ownership, tuning, health monitoring, and retirement.
• Prioritize detection work using threat intel, hunt findings, incident lessons, and analyst feedback.
• Build identity-centric detections on Okta and IOAs in CrowdStrike and Defender; AWS coverage with CloudTrail/GuardDuty.
• Diagnose issues across telemetry chain and SIEM visibility gaps.
• Operate detections as code with versioning, peer review, and documented change records.
• Produce MITRE ATT&CK coverage reporting and mentor two senior detection engineers.

Skills

Detections engineering

Mentoring/leadership

Remote collaboration

Threat intel prioritization

Code quality & review

Executive communication

Tools

Elastic Security

Splunk

CrowdStrike IOAs

Microsoft Defender

AWS CloudTrail/GuardDuty

Okta detections

Job description

AspenView Tech is seeking a senior detection engineering lead to own the detection program for a large U.S. consumer lender. The role blends hands‑on rule authoring with people leadership across identity, endpoint, and cloud telemetry, reporting to client security leadership.

You will guide two senior detection engineers, maintain detections as code, and deliver MITRE ATT&CK coverage with risk guidance and gaps analysis for the client.