Senior Threat Detection Engineer & Hunt Automation

BCMC; Arlington (VA); Presencial; USD 120.000 - 170.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Extremely competitive salary

Employer-paid medical/dental/vision (n

Descripción de la vacante

BCMC is seeking a Senior Detection Engineer to support on-site incident response for a U.S. Government contract in Arlington, VA.

The role focuses on developing, validating, deploying, and tuning detection logic across endpoint, network, identity, and cloud telemetry to improve threat hunting outcomes. You will translate threat intel and incident findings into measurable detections, automation, and analytics, and work with hunters, engineers, and data scientists to deliver scalable detection

Formación

• Must be a US Citizen.
• Active TS/SCI clearance required.
• DHS Suitability eligibility preferred.
• 10+ years of directly relevant experience in threat hunting, detection engineering, or related defensive cyber operations.
• Senior-level experience owning production detection content and incident response processes.
• Strong hypothesis development and adversary behavior analysis.
• Proficiency in security query languages (KQL, SPL, EQL, ES|QL) and multiple platforms.
• Proficiency in Python and PowerShell for analytics and automation.
• Experience mapping detections to MITRE ATT&CK and validating telemetry.

Responsabilidades

• Develop and test hypotheses to uncover adversary techniques and document conclusions.
• Build and tune behavioral analytics, signatures, and queries across endpoint, network, identity, cloud telemetry.
• Translate hunt findings into reusable detections with clear data requirements and guidance.
• Test detections using historical data, simulations, and purple team exercises.
• Analyze false positives/negatives and improve alert fidelity and context.
• Assess data sources and remediation needs with infrastructure teams.
• Automate enrichment, query execution, and detection validation; implement SOAR playbooks when applicable.
• Maintain versioned content, reviews, and rollout procedures.

Conocimientos

US Citizenship

TS/SCI clearance

DHS suitability

10+ years experience

Threat hunting

Detection engineering

Incident response

Query languages

KQL

SPL

EQL

MITRE ATT&CK

Python

PowerShell

Automation

Documentation

Windows internals

Linux internals

Educación

Bachelor's degree in Engineering, Computer Science, Cybersecurity, Information Systems, or related field

Master's Degree preferred

Herramientas

CrowdStrike Falcon

Microsoft Defender

Cortex XDR

SentinelOne

Elastic

Splunk

Sigma

Descripción del empleo

BCMC is seeking a Senior Detection Engineer to support on-site incident response for a U.S. Government contract in Arlington, VA.

The role focuses on developing, validating, deploying, and tuning detection logic across endpoint, network, identity, and cloud telemetry to improve threat hunting outcomes. You will translate threat intel and incident findings into measurable detections, automation, and analytics, and work with hunters, engineers, and data scientists to deliver scalable detection