Senior Threat Detection Engineer — Hybrid Role

3M HEALTHCARE; Scottsdale (AZ); Hybrid; USD 132,000 - 165,000; Full time

Benefits offered by this job

Discretionary incentive plan

Benefits

Job summary

Early Warning Services, LLC is seeking a Detection Engineer to join a high‑performing security team in a hybrid role spanning multiple locations. You will create detections and investigate threats across devices, networks and cloud services to enable rapid detection and response.

The role emphasizes MITRE ATT&CK alignment, proactive hunting, and collaboration with incident response and threat intel. Candidates should have extensive malware analysis experience and strong analytical skills.

Qualifications

• Bachelor’s degree in a relevant field.
• Minimum 8 years of information security experience.
• Expert malware analysis and reverse engineering skills.
• Proven experience creating detections for advanced threats.
• Strong knowledge of network monitoring and exploitation techniques.
• Experience in responding to threats from multiple sources.

Responsibilities

• Continuously validate detections and identify gaps to ensure comprehensive coverage.
• Tune and test high‑fidelity rules for the SIEM platform.
• Hunt for APT TTPs and map to MITRE ATT&CK framework.
• Coordinate with IR, threat intel, and other teams on remediation plans.
• Analyze logs from IDS, firewalls and network traffic for threat detection.
• Track malicious threats and actor TTPs and report trends to leadership.
• Document and update security processes and procedures.
• Maintain awareness of threat landscape and regulatory requirements.

Skills

Malware analysis

Reverse engineering

Threat detection

MITRE ATT&CK

SIEM tuning

Incident response

Education

Bachelor's degree in Computer Science, Engineering, Math or Physical Science

Job description

Early Warning Services, LLC is seeking a Detection Engineer to join a high‑performing security team in a hybrid role spanning multiple locations. You will create detections and investigate threats across devices, networks and cloud services to enable rapid detection and response.

The role emphasizes MITRE ATT&CK alignment, proactive hunting, and collaboration with incident response and threat intel. Candidates should have extensive malware analysis experience and strong analytical skills.