Senior Threat Detection Engineer: Hunt, Emulation & SIEM

CVS Health; Jefferson City (MO); On-site; USD 107,000 - 284,000; Full time

Job summary

CVS Health is seeking a Staff Threat Detection Engineer to strengthen our security posture by building and refining detections, hunting threats, and supporting adversary emulation activities. You will collaborate with Security Operations and Incident Response to validate controls and improve response effectiveness.

The ideal candidate brings extensive experience in threat detection, offense security, and automation scripting across modern SIEM tools, with strong communication skills and a

Qualifications

• 7+ years of experience in threat detection, hunting, penetration testing, and/or offensive security.
• 5+ years of experience with Microsoft Security tools (Defender for Endpoint, Sentinel), CrowdStrike, and Splunk.
• 3+ years of scripting for automation and detection logic (Python, PowerShell, or Bash).

Responsibilities

• Develop, deploy, and optimize detection rules across SIEM platforms (Microsoft Sentinel, Splunk).
• Conduct threat hunting with Defender for Endpoint, CrowdStrike, and other SOC tools.
• Design and execute adversary emulation scenarios and coordinate purple team activities.
• Produce detailed reports with findings and actionable recommendations.
• Integrate threat intelligence into detection strategies and assist incident response.

Skills

Threat detection & hunting

Offensive security

Penetration testing

Automation scripting

Education

Bachelor's degree or higher

Tools

KQL

SPL

Python

PowerShell

Bash

Job description

CVS Health is seeking a Staff Threat Detection Engineer to strengthen our security posture by building and refining detections, hunting threats, and supporting adversary emulation activities. You will collaborate with Security Operations and Incident Response to validate controls and improve response effectiveness.

The ideal candidate brings extensive experience in threat detection, offense security, and automation scripting across modern SIEM tools, with strong communication skills and a