SIEM & Detection Engineer — Build Real-Time Threat Detections

Mantis Security Corporation; Reston (VA); On-site; USD 110,000 - 160,000; Full time

Job summary

Mantis Security Corporation is seeking a SIEM / Detection Engineer to enhance threat detection, logging, and response. You will develop, tune, and maintain Splunk searches, alerts, and dashboards while collaborating with SOC analysts to improve visibility and detections across Windows, Linux, network, and cloud environments.

The role focuses on translating attacker techniques into actionable detections, onboarding data sources, and reducing false positives.

Qualifications

• 3+ years in cybersecurity with hands-on SIEM or security monitoring experience
• Strong Splunk experience with SPL searches, correlation searches, dashboards and alert development
• Experience developing and tuning detections in a SOC environment
• Understanding of logging across Windows, Linux, network, endpoint, identity and cloud
• Experience onboarding and troubleshooting security data sources within a SIEM
• Ability to translate attacker techniques into detection logic (MITRE ATT&CK)
• Familiarity with incident response, threat hunting and DoD/Ironclad security practices
• Relevant cybersecurity or SIEM certifications (Security+, CySA+, GIAC, Splunk)

Responsibilities

• Develop, tune, and maintain Splunk searches, alerts, correlation rules, and dashboards
• Build and improve detection logic to identify malicious activity while reducing false positives
• Support onboarding and validation of security log sources
• Identify gaps in logging and detection coverage and implement improvements
• Translate threats into actionable detections using MITRE ATT&CK framework
• Assist SOC investigations and threat hunting with queries across data sources
• Troubleshoot SIEM data ingestion, search, alerting, and performance issues
• Document detection logic, configurations, and recommended improvements

Skills

SIEM monitoring

Splunk SPL

Detection engineering

SOC operations

Threat hunting

MITRE ATT&CK

Incident response

Log source analysis

Education

Security+ / CySA+ / GIAC / Splunk certs

Tools

Splunk

AWS

Python

Job description

Mantis Security Corporation is seeking a SIEM / Detection Engineer to enhance threat detection, logging, and response. You will develop, tune, and maintain Splunk searches, alerts, and dashboards while collaborating with SOC analysts to improve visibility and detections across Windows, Linux, network, and cloud environments.

The role focuses on translating attacker techniques into actionable detections, onboarding data sources, and reducing false positives.