Senior Threat Detection Engineer: Purple Team & Threat Hunting

CVS Health; Des Moines (IA); On-site; USD 107,000 - 284,000; Full time

Job summary

CVS Health is seeking a Staff Threat Detection Engineer to lead threat hunting, detection engineering, and adversary emulation across the security program. You will build detections in SIEMs like Microsoft Sentinel and Splunk, run purple-team exercises, and guide incident response with actionable insights.

The ideal candidate has 7+ years in threat detection and 5+ years with security tools, plus scripting skills.

Qualifications

• 7+ years of experience in threat detection, hunting, penetration testing, and/or offensive security.
• 3+ years of experience with automation and detection logic using scripting languages.

Responsibilities

• Develop, deploy, and optimize detection rules across SIEM platforms such as Microsoft Sentinel and Splunk.
• Conduct threat hunting activities using Microsoft Defender, CrowdStrike, and other SOC tools to identify and respond to advanced threats.
• Leverage KQL and SPL to create custom detections and automate responses.
• Continuously refine detection capabilities based on emerging threats and intelligence.
• Produce detailed reports with findings and actionable recommendations.

Skills

Threat detection

Threat hunting

Scripting (Python/PowerShell)

Education

Bachelor's degree

Tools

Microsoft Defender for Endpoint

Sentinel (Microsoft)

CrowdStrike

Splunk

Job description

CVS Health is seeking a Staff Threat Detection Engineer to lead threat hunting, detection engineering, and adversary emulation across the security program. You will build detections in SIEMs like Microsoft Sentinel and Splunk, run purple-team exercises, and guide incident response with actionable insights.

The ideal candidate has 7+ years in threat detection and 5+ years with security tools, plus scripting skills.