Senior Threat Detection Architect

Nightwing; Sterling (VA); Ibrido; USD 122.000 - 253.000; Tempo pieno

Vantaggi offerti da questo lavoro

Medical insurance

Vision insurance

Dental insurance

401k plan

Descrizione del lavoro

Nightwing is seeking a Senior Detection Engineer to develop, validate, deploy, and tune detection logic across endpoint, network, identity, and cloud telemetry for federal and critical infrastructure environments. The role combines advanced threat hunting, adversary behavior analysis, and detection engineering to deliver reliable detections, automation, and scalable operations.

You will work with threat hunters, delivery teams, and analytics developers to translate findings into validated

Competenze

• Must be a US Citizen.
• Must have an active TS/SCI clearance.
• Must be able to obtain DHS Suitability.
• 10+ years of directly relevant experience.

Mansioni

• Develop and test hypotheses to uncover persistence, privilege escalation, credential access, lateral movement, command and control, and defense evasion.
• Correlate evidence across data sources and document defensible conclusions.
• Build behavioral analytics, correlation rules, signatures, and queries using endpoint, network, identity, cloud, and application telemetry.
• Target adversary techniques and activity sequences rather than indicators of compromise.
• Translate remaining gaps into technical requirements and acceptance criteria.

Conoscenze

US Citizenship

TS/SCI clearance

Threat hunting

Detection engineering

Incident response

MITRE ATT&CK mapping

Python/PowerShell

Security query languages (KQL, SPL, E{

Strumenti

CrowdStrike Falcon

Microsoft Defender

Cortex XDR

SentinelOne

Elastic

Splunk

Descrizione del lavoro

Nightwing is seeking a Senior Detection Engineer to develop, validate, deploy, and tune detection logic across endpoint, network, identity, and cloud telemetry for federal and critical infrastructure environments. The role combines advanced threat hunting, adversary behavior analysis, and detection engineering to deliver reliable detections, automation, and scalable operations.

You will work with threat hunters, delivery teams, and analytics developers to translate findings into validated