Senior Threat Detection & Hunting Engineer

Koitecc Solutions; Pierre, Northern (SD, KY); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Competitive compensation

Comprehensive benefits

Career growth

Job summary

CVS Health is seeking a Staff Threat Detection Engineer to help us stay ahead of evolving cyber threats. You will perform threat hunting, detection engineering, and adversary emulation to identify risks and strengthen our security posture across security operations and incident response teams.

Responsibilities include developing detections for Microsoft Sentinel and Splunk, using KQL and SPL, conducting purple team exercises, and producing detailed findings with practical recommendations.

Qualifications

• 7+ years of experience in threat detection, hunting, penetration testing, and/or offensive security.
• 5+ years of experience in Microsoft Security tools (Defender for Endpoint, Sentinel), CrowdStrike, and Splunk.
• 3+ years of experience with KQL, SPL, Python, PowerShell, or Bash scripting for automation and detection logic.

Responsibilities

• Develop, deploy, and optimize detection rules across SIEM platforms such as Microsoft Sentinel and Splunk.
• Conduct threat hunting activities using Microsoft Defender, CrowdStrike, and other SOC tools to identify and respond to advanced threats.
• Leverage KQL and SPL to create custom detections and automate responses.
• Continuously refine detection capabilities based on emerging threats and intelligence.
• Assist with internal and external penetration tests to identify vulnerabilities.
• Design and execute adversary emulation scenarios to assess detection and response effectiveness.

Skills

Threat detection

Threat hunting

Offensive security

Penetration testing

Adversary emulation

Education

Bachelor's degree

Tools

Microsoft Defender for Endpoint

Microsoft Sentinel

CrowdStrike

Splunk

KQL

SPL

Python

Job description

CVS Health is seeking a Staff Threat Detection Engineer to help us stay ahead of evolving cyber threats. You will perform threat hunting, detection engineering, and adversary emulation to identify risks and strengthen our security posture across security operations and incident response teams.

Responsibilities include developing detections for Microsoft Sentinel and Splunk, using KQL and SPL, conducting purple team exercises, and producing detailed findings with practical recommendations.