Senior Threat Detection Engineer & Adversary Emulation

Koitecc Solutions; Cheyenne (WY); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Medical benefits

Dental coverage

Vision coverage

Paid time off

Retirement plan

Wellness programs

Job summary

CVS Health is seeking a Staff Threat Detection Engineer to advance threat hunting, detection engineering, and offensive security capabilities. You will work with Security Operations and Incident Response to develop detections, validate controls, and strengthen the organization’s security posture.

Collaborating with blue and red teams, you will implement adversary emulation, leverage threat intelligence, and refine monitoring to protect critical systems and data across the enterprise.

Qualifications

• 7+ years of experience in threat detection, hunting, penetration testing, and/or offensive security.
• 5+ years of experience with Microsoft Security tools (Defender for Endpoint, Defender for Identity, Sentinel) and with CrowdStrike and Splunk.
• 3+ years of experience with scripting for automation and detection logic (KQL, SPL, Python, PowerShell or Bash).

Responsibilities

• Develop, deploy, and optimize detection rules across SIEM platforms such as Microsoft Sentinel and Splunk.
• Conduct threat hunting activities using Microsoft Defender, CrowdStrike, and other SOC tools to identify and respond to advanced threats.
• Leverage KQL and SPL to create custom detections and automate responses.
• Continuously refine detection capabilities based on emerging threats and intelligence.
• Assist with internal and external penetration tests to identify vulnerabilities.
• Design and execute adversary emulation scenarios to assess detection and response effectiveness.
• Produce detailed reports with findings and actionable recommendations.
• Work closely with blue teams to conduct purple team exercises, bridging offensive and defensive security efforts.
• Provide actionable insights to improve monitoring, alerting, and incident response based on adversary tactics.
• Integrate threat intelligence into detection strategies to prioritize threats and adapt detection rules.

Skills

Threat detection & hunting

Offensive security

Penetration testing

Education

Bachelor's degree or equivalent experience

Tools

Microsoft Defender

Sentinel

CrowdStrike

Splunk

KQL

SPL

Python

PowerShell

Bash

Job description

CVS Health is seeking a Staff Threat Detection Engineer to advance threat hunting, detection engineering, and offensive security capabilities. You will work with Security Operations and Incident Response to develop detections, validate controls, and strengthen the organization’s security posture.

Collaborating with blue and red teams, you will implement adversary emulation, leverage threat intelligence, and refine monitoring to protect critical systems and data across the enterprise.