Senior Threat Detection Engineer - Detection & Automation

Nightwing Technologies, LLC; Arlington (VA); On-site; USD 140,000 - 210,000; Full time

Job summary

Nightwing Technologies, LLC is seeking a Senior Detection Engineer to develop, validate, and tune detections for proactive threat hunting across federal and critical infrastructure environments. The role spans endpoint, network, identity, and cloud telemetry, serving as a bridge between threat hunters, delivery teams, engineers, and data scientists.

You will turn operational findings into validated detections, automation, and capability requirements, coordinating with various teams to improve

Qualifications

• must have hands-on experience turning threat intel and hunt findings into validated detections.
• knowledge of endpoint, network, identity, and cloud telemetry is essential.

Responsibilities

• Develop and test hypotheses to uncover persistence, privilege escalation, credential access, lateral movement, C2, and defense evasion.
• Build behavioral analytics, correlation rules, signatures, and queries across endpoint, network, identity, cloud telemetry.
• Translate hunt results into reusable detections with clear data requirements and guidance.
• Test detections against historical telemetry and simulations to verify behavior and reduce evasion opportunities.
• Coordinate with hunters, responders, analysts, and engineers to integrate detections into workflows.
• Maintain automation for enrichment, queries, and validation, including SOAR playbooks where applicable.

Skills

Threat hunting

Detection engineering

Endpoint telemetry

Network telemetry

Cloud telemetry

Automation scripting

Threat intelligence translation

Job description

Nightwing Technologies, LLC is seeking a Senior Detection Engineer to develop, validate, and tune detections for proactive threat hunting across federal and critical infrastructure environments. The role spans endpoint, network, identity, and cloud telemetry, serving as a bridge between threat hunters, delivery teams, engineers, and data scientists.

You will turn operational findings into validated detections, automation, and capability requirements, coordinating with various teams to improve