Senior Threat Detection Engineer — Purple Team

CVS Health; Jackson (MS); On-site; USD 96,000 - 117,000; Full time

Job summary

CVS Health is seeking a Staff Threat Detection Engineer to help strengthen the organization's security posture through threat hunting, detection engineering, and adversary emulation. You will work with Security Operations, Incident Response, and other cybersecurity teams to develop detections and validate controls.

The role requires experience with SIEMs, blue/ purple team exercises, and a proactive approach to threat intelligence integration.

Qualifications

• 7+ years in threat detection, hunting, pentesting, or offensive security.
• 5+ years with Microsoft security tools (Defender, Sentinel), CrowdStrike, and Splunk.
• 3+ years with scripting (Python, PowerShell, Bash) for automation and detection logic.

Responsibilities

• Develop, deploy, and optimize detection rules across SIEMs like Microsoft Sentinel and Splunk.
• Conduct threat hunting using Defender, CrowdStrike, and other SOC tools.
• Create detections with KQL and SPL and automate responses.

Skills

Threat hunting

Detection engineering

Offensive security

Python/PowerShell scripting

Education

Bachelor's degree

Tools

Microsoft Defender

Microsoft Defender for Endpoint

Microsoft Sentinel

CrowdStrike

Splunk

KQL

SPL

Job description

CVS Health is seeking a Staff Threat Detection Engineer to help strengthen the organization's security posture through threat hunting, detection engineering, and adversary emulation. You will work with Security Operations, Incident Response, and other cybersecurity teams to develop detections and validate controls.

The role requires experience with SIEMs, blue/ purple team exercises, and a proactive approach to threat intelligence integration.