Senior Threat Detection Engineer

Macquarie Global Services; Houston (TX); Hybrid; USD 110,000 - 170,000; Full time

Benefits offered by this job

Hybrid work arrangements

Wellbeing leave day

Parental leave

Volunteer leave

Health and lifestyle benefits

Job summary

Macquarie Global Services is seeking a Cyber Threat Detection Engineer to design and evolve threat-detection capabilities across a global enterprise. You will blend security analysis with software development to automate detections and scale operations in a distributed team.

You will leverage SIEMs like Splunk ES and Sumo Logic, work with cloud platforms, and apply Detection-as-Code practices to improve fidelity and response. Hybrid work arrangements are available.

Qualifications

• Must have 3–5 years in detection engineering, security operations, or IR.
• Deep knowledge of MITRE ATT&CK, vulnerabilities, and exploits.
• Experience with SIEM platforms and threat hunting at enterprise scale.

Responsibilities

• Design, build, and implement detection mechanisms to identify advanced threats.
• Automate and scale the threat detection lifecycle using code and pipelines.
• Triaging and mitigating threats across a large, distributed enterprise.

Skills

Threat detection

Threat hunting

SIEM analytics

Detection-as-Code

Cloud and security tooling

Tools

Splunk ES

Google SecOps

Sumo Logic

Git-based workflows

CI/CD pipelines

Job description

Join Macquarie's Cyber Threat Incident Response team as a Cyber Threat Detection Engineer. This team is responsible for detecting, identifying, triaging, and mitigating threats and risks in our global cyber environment. You will be part of a highly skilled, distributed team protecting our global infrastructure.

What role will you play?

As a Cyber Threat Detection Engineer, you will play a critical role in developing and evolving our threat and intel-informed defensive capabilities. You will be responsible for designing, building, and implementing effective detection mechanisms and content to identify advanced cyber threats across our large and complex enterprise environment. You will blend traditional security analysis with software development practices to automate and scale our threat detection lifecycle.

What you offer

• 3‐5 years of cybersecurity experience in detection engineering, security operations, or incident response, with a proven ability to triage, investigate, and respond to cyber threats
• Strong threat detection and hunting expertise, including deep knowledge of threat actor tactics, techniques, and procedures (TTPs), the MITRE ATT&CK framework, vulnerabilities, and exploits, and how they manifest across diverse log sources and security artifacts
• Extensive hands‑on experience with SIEM and security analytics platforms such as Splunk ES, Google SecOps, and Sumo Logic, building and tuning detection logic and conducting threat hunting within medium‑to‑large enterprise environments
• Proficient in Detection‑as‑Code practices, leveraging software development skills, Git‑based version control, CI/CD pipelines, automation tools, and platforms such as GitHub, Bitbucket, and CloudBees to develop, manage, and deploy scalable detections
• Strong understanding of enterprise security technologies and modern tooling, including cloud platforms (AWS, Azure, GCP), firewalls, EDR, proxies, and emerging AI‑powered coding assistants (e.g., GitHub Copilot, Claude Code), paired with an analytical mindset focused on innovation, problem‑solving, and continuous improvement of detection fidelity.

What we offer

• 1 wellbeing leave day per year and a minimum of 25 days of annual leave
• 20 weeks' paid parental leave for primary caregivers along with 12 days of paid transition leave upon return to work and 6 weeks' paid leave for secondary caregivers
• 2 days of paid volunteer leave and donation matching
• Benefits and initiatives to support your physical, mental and financial wellbeing such as medical, prescription drug, dental, and vision insurance; health savings account and dependent day care savings account; life insurance, disability, and other insurance plans; 401(k) and short/long term disability
• Access to our Employee Assistance Program, a robust behavioural health network with counselling and coaching services
• Access to a wide range of learning and development opportunities, including reimbursement for professional membership or subscription
• Recognition and service awards
• Hybrid and flexible working arrangements, dependent on role
• Reimbursement for work from home equipment

About Technology

Technology enables every aspect of Macquarie, for our people, our customers and our communities. We're a global team that is passionate about accelerating the digital enterprise, connecting people and data, building platforms and applications and designing tomorrow's technology solutions.

Empowering all kinds of bright and driven people

We are committed to providing an inclusive environment for all that values and respects different experiences, skillsets and perspectives. Macquarie provides access to opportunities for all individuals regardless of race, color, religion, sex, sexual orientation, national origin, age, disability, protected veteran status, genetic information, marital status, gender identity or any other characteristic or circumstance.
We provide reasonable accommodation to individuals who may need support during the recruitment process and employment. If you require an accommodation, please let us know during the application process.