Senior Threat Detection & Purple Team Engineer

CVS Health; Augusta (ME); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Bonus eligibility

Equity award program

Comprehensive benefits

Job summary

CVS Health is seeking a Staff Threat Detection Engineer to advance our security posture through threat hunting, detection engineering, and offensive security. You will develop detections across SIEMs, perform adversary emulation, and collaborate with SOC teams to improve visibility and response.

Qualified candidates have 7+ years in threat detection, hunting, and offensive security, plus 5+ years with Microsoft security tools and Splunk.

Qualifications

• 7+ years of experience in threat detection, hunting, penetration testing, and/or offensive security.
• 5+ years of experience with Microsoft security tools (Defender for Endpoint, Defender, Sentinel), CrowdStrike and Splunk.
• 3+ years of scripting (KQL, SPL, Python, PowerShell, or Bash) for automation and detection logic.

Responsibilities

• Develop, deploy, and optimize detection rules across SIEM platforms.
• Conduct threat hunting using SOC tools to identify advanced threats.
• Design adversary emulation scenarios and perform penetration testing.
• Produce detailed reports with findings and actionable recommendations.
• Support purple team exercises and improve monitoring, alerting, and incident response.

Skills

Threat detection

Threat hunting

Penetration testing

Offensive security

Education

Bachelor's degree or equivalent experience

Tools

Microsoft Defender for Endpoint

Microsoft Defender

Sentinel

CrowdStrike

Splunk

Job description

CVS Health is seeking a Staff Threat Detection Engineer to advance our security posture through threat hunting, detection engineering, and offensive security. You will develop detections across SIEMs, perform adversary emulation, and collaborate with SOC teams to improve visibility and response.

Qualified candidates have 7+ years in threat detection, hunting, and offensive security, plus 5+ years with Microsoft security tools and Splunk.