Senior Threat Hunting & Detection Engineer

NewGen Technologies; Arlington (VA); On-site; USD 150,000 - 230,000; Full time

Job summary

NewGen Technologies seeks a Senior Detection Engineer to develop, test, and tune detection logic across endpoint, network, identity, and cloud telemetry for a U.S. Government contract.

You will translate threat intel and incident lessons into validated detections, automation, and scalable workflows, collaborating with hunters, engineers, and data scientists to improve coverage and reduce false positives.

Qualifications

• Must be US citizen with active TS/SCI clearance.
• Bachelor's degree in Engineering, Computer Science, Cybersecurity, Information Systems, or related field; Master’s preferred.
• Demonstrated senior-level experience in threat hunting, detection engineering, incident response, or closely related defensive cyber operations, including ownership of production detection content.
• Strong command of hypothesis development, adversary behavior analysis, iterative investigation, and evidence-based conclusions.
• Proficiency in one or more security query languages and ability to adapt logic across platforms; experience mapping detections to MITRE ATT&CK.
• Proficiency in Python and PowerShell for analysis, enrichment, testing, and automation.

Responsibilities

• Develop and test hypotheses to uncover persistence, privilege escalation, credential access, lateral movement, C2, and defense evasion.
• Build behavioral analytics, correlation rules, signatures, and queries across endpoint, network, identity, cloud, and app telemetry.
• Convert hunt methods and incident findings into reusable detections with clear purpose, data requirements, and guidance.
• Test detections against historical telemetry and controlled simulations; verify behavior and document evidence.
• Analyze false positives/negatives, alert volume, thresholds, and baselines to improve fidelity and reduce noise.
• Assess sensor/tools data quality; identify gaps and coordinate remediation with infra teams.
• Develop automation for enrichment, queries, analytical workflows, and SOAR playbooks; ensure recoverability.
• Maintain versioned content, peer reviews, release criteria, and rollback procedures.
• Coordinate with hunters, responders, analysts, and engineers to integrate detections into workflows.
• Measure coverage and gaps; communicate operational significance without relying on rule counts.
• Collaborate with data scientists to develop advanced analytics while considering data dependencies.

Skills

US Citizen

Active TS/SCI Clearance

DHS Suitability

Threat hunting

Detection engineering

Incident response

Independent ownership of productionDet

MITRE ATT&CK mapping

Automation

SOAR playbooks

Windows internals

Linux internals

Cloud telemetry

Python

PowerShell

Education

Bachelor's degree in Engineering, Computer Science, Cybersecurity, Information Systems, or related field

Master's Degree preferred

Tools

KQL

SPL

EQL

ES|QL

Python

PowerShell

Job description

NewGen Technologies seeks a Senior Detection Engineer to develop, test, and tune detection logic across endpoint, network, identity, and cloud telemetry for a U.S. Government contract.

You will translate threat intel and incident lessons into validated detections, automation, and scalable workflows, collaborating with hunters, engineers, and data scientists to improve coverage and reduce false positives.