Threat Detection Engineer

Unity Technologies Corporation; Columbus (OH); On-site; USD 90,000 - 140,000; Full time

Job summary

UnityTec in Columbus, OH is seeking a Threat Detection Engineer to design advanced detection use cases and customize SIEM scripts to defend critical enterprise systems.

You will collaborate with cybersecurity SMEs, system owners, and analysts to optimize telemetry, analyze gaps, and prioritize high-fidelity alerting tailored to key applications. The role emphasizes defense-in-depth, scripting in PowerShell/Python, and hands-on SIEM tuning.

Qualifications

• A minimum of five (5) years of IT experience.
• A minimum of three (3) years with a SIEM in content development or Incident Response.
• A minimum of three (3) years of System and/or Network Administration experience.
• Understanding of log formats and MITRE ATT&CK framework.
• Strong knowledge of network architecture.
• Experience developing and maintaining scripts (PowerShell, Python or SPL).
• Understanding of defense-in-depth.

Responsibilities

• Threat Detection Engineering & Use Case Development: design, develop, and refine new threat detection use cases and custom signatures tailored to programs and critical apps.
• SIEM Optimization & Automation: develop custom scripts, drive automation, and expand security analytics capabilities.
• Telemetry Optimization & Data Quality Assurance: review data feeds and telemetry for high-fidelity alerting.
• Security Gap Analysis & Cross-Functional Collaboration: work with SMEs, system owners, and analysts to identify vulnerabilities and prioritize protections.

Skills

Threat detection

SIEM content development

Incident response

System administration

Network administration

MITRE ATT&CK

PowerShell/Python scripting

Education

Bachelor’s degree in a relevant field

CEH certification

CySA+ certification

GCIA

GCIH

GICSP

Tools

PowerShell

Python

SPL

Job description

Company Overview

UnityTec is an SBA-certified Woman-Owned Small Business (WOSB) delivering high-impact professional and technical services to government agencies. With deep expertise in Industrial and Enterprise Systems Modernization, FIAR (Financial Improvement and Audit Readiness), Industrial Facility Transformation, Program and Project Management, Enterprise Support and Consulting, and Advanced Analytics, we empower organizations to modernize operations and advance mission priorities. Our disciplined approach—grounded in dedicated talent, proactive planning, rigorous quality assurance, agile methodologies, cost-effective delivery, and uncompromising ethics—positions UnityTec as a trusted partner committed to achieving measurable, enduring results for our clients.

Job Overview

We are seeking a Threat Detection Engineer to join our team. You will engineer advanced threat detection use cases and develop custom SIEM scripts to proactively defend critical enterprise systems against emerging cyber threats. Additionally, you will collaborate closely with cross-functional stakeholders to optimize data telemetry, identify security capability gaps, and prioritize high-fidelity alerting tailored to specific applications. You will be located in Columbus, OH.

Responsibilities include, but are not limited to:

Threat Detection Engineering & Use Case Development

• Continuously researching emerging threats and integrating threat intelligence to design, develop, and refine new threat detection use cases and custom signatures tailored to individual programs and critical applications.

SIEM Optimization & Automation

• Enhancing Security Information and Event Management (SIEM) platforms by developing custom scripts, driving automation, and expanding overall security analytics capabilities.

Telemetry Optimization & Data Quality Assurance

• Conducting rigorous reviews of incoming data feeds and telemetry to recommend and implement technical improvements, ensuring high-fidelity data ingestion for accurate alerting.

Security Gap Analysis & Cross-Functional Collaboration

• Partnering seamlessly with cybersecurity Subject Matter Experts (SMEs), system owners, and Threat Detection Analysts to identify vulnerabilities, define alerting priorities, and establish comprehensive protection strategies for critical systems.

Required Qualifications:

• A minimum of five (5) years of relevant IT experience.
• A minimum of three (3) years working with a SIEM in a content development or Incident Response role.
• A minimum of three (3) years of System and/or Network Administration experience.
• Understanding of various log formats.
• Understanding of the MITRE ATT&CK framework.
• Strong understanding of network architecture.
• Experience developing and maintaining scripts (preferably using PowerShell, Python or SPL).
• Understanding of Defense-in-Depth.

Preferred Qualifications:

• A bachelor’s degree in a relevant field of study.
• Relevant certifications, such as: CEH, CySA+, CFR, GCIA, GCIH, or GICSP.

Clearance Requirements:

• Must be a U.S. citizen.
• Must possess a DoD current Top-Secret clearance.

UnityTec is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.