Senior Threat Detection & Purple Team Engineer

CVS Health; Cheyenne (WY); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Medical coverage

Dental coverage

Vision coverage

Paid time off

Retirement savings options

Wellness programs

Job summary

CVS Health is seeking a Staff Threat Detection Engineer to strengthen our security posture by combining threat hunting, detection engineering, and offensive security. You will work with Security Operations and Incident Response to build detections, validate controls, and respond to evolving threats.

You will help design adversary emulation exercises, automate detections, and drive purple-team activities to improve visibility and response effectiveness across Microsoft Sentinel, Splunk, and other

Qualifications

• 7+ years of experience in threat detection, hunting, penetration testing, and/or offensive security.
• 5+ years of experience with Microsoft security tools and Splunk.
• 3+ years of scripting for automation and detection logic (Python/PowerShell/Bash).

Responsibilities

• Develop, deploy, and optimize detection rules across SIEM platforms.
• Conduct threat hunting using Defender, CrowdStrike, and other SOC tools.
• Design and execute adversary emulation scenarios to test detection and response.
• Collaborate with blue teams and incident responders to improve monitoring and responses.
• Integrate threat intelligence into detection strategies and gap analysis.

Skills

Threat detection

Threat hunting

Penetration testing

Offensive security

Automation scripting

Education

Bachelor's degree or equivalent experience

Tools

Microsoft Defender for Endpoint

Microsoft Sentinel

CrowdStrike

Splunk

KQL

SPL

Python

PowerShell

Bash

Job description

CVS Health is seeking a Staff Threat Detection Engineer to strengthen our security posture by combining threat hunting, detection engineering, and offensive security. You will work with Security Operations and Incident Response to build detections, validate controls, and respond to evolving threats.

You will help design adversary emulation exercises, automate detections, and drive purple-team activities to improve visibility and response effectiveness across Microsoft Sentinel, Splunk, and other