Senior Threat Detection Engineer & Automation Lead

NewGen Technologies; Arlington (VA); In loco; USD 140.000 - 200.000; Tempo pieno

Descrizione del lavoro

NewGen Technologies seeks a Senior Detection Engineer for onsite support with a U.S. Government client.

You will develop, validate, deploy, and tune detection logic to enable proactive threat hunting across federal and critical infrastructure environments. You will translate threat intelligence and incident findings into reliable analytics, queries, and automation spanning endpoint, network, identity, and cloud telemetry.

Competenze

• Bachelor's or higher in engineering, CS, cybersecurity, or information systems.
• Master's degree preferred for advanced roles.
• 10+ years of directly relevant experience in threat hunting or detection engineering.

Mansioni

• Develop and test hypotheses to uncover persistence, privilege escalation, credential access, lateral movement, C2, and defense evasion.
• Build behavioral analytics, correlation rules, signatures, and queries using endpoint, network, identity, cloud, and application telemetry.
• Translate hunt methods and incident findings into reusable detections with clear data requirements and guidance.
• Test detections against historical telemetry, simulations, and purple team exercises; document evidence.

Conoscenze

Threat hunting

Detection engineering

Incident response

ATT&CK mapping

Python

PowerShell

KQL/EQL

Leadership

Formazione

Bachelor's degree in Engineering or CS

Master's degree preferred

Strumenti

CrowdStrike Falcon

Microsoft Defender

Cortex XDR

Splunk

Sigma

Descrizione del lavoro

NewGen Technologies seeks a Senior Detection Engineer for onsite support with a U.S. Government client.

You will develop, validate, deploy, and tune detection logic to enable proactive threat hunting across federal and critical infrastructure environments. You will translate threat intelligence and incident findings into reliable analytics, queries, and automation spanning endpoint, network, identity, and cloud telemetry.