Threat Detection Engineer

Capgemini; New York (NY); On-site; USD 69,000 - 107,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

Retirement benefits

Job summary

Tundra Technical Solutions is seeking a Threat Detection Engineer to develop and enhance enterprise threat detection capabilities across security monitoring platforms. You will focus on creating advanced detection logic, threat hunting, incident identification, and security analytics across traditional and AI-enabled environments.

You will collaborate with SOC, cyber defense, and threat intelligence teams to improve detection coverage and reduce organizational cyber risk.

Qualifications

• 7+ years of cybersecurity and security operations experience.
• Hands-on experience with Splunk, Sentinel, QRadar, or similar SIEM tools.
• Experience building detection content and threat-hunting methodologies.

Responsibilities

• Develop and tune SIEM detection use cases and correlation rules.
• Perform proactive threat hunting and behavioral analytics.
• Create and maintain security monitoring content.
• Investigate emerging threats and map detections to MITRE ATT&CK.
• Improve detection coverage for cloud, endpoint, and network environments.
• Build automated response workflows and security analytics dashboards.
• Support detection strategies for AI, GenAI, and LLM-based technologies.

Skills

Threat Detection

SIEM/EDR

Tools

Splunk

Microsoft Sentinel

QRadar

Job description

The Threat Detection Engineer will develop and enhance enterprise threat detection capabilities across security monitoring platforms. This role will focus on creating advanced detection logic, threat hunting, incident identification, security analytics, and monitoring of both traditional and AI-enabled environments. The engineer will work closely with SOC, cyber defense, and threat intelligence teams to improve detection coverage and reduce organizational cyber risk.

Key Responsibilities

• Develop and tune SIEM detection use cases and correlation rules.
• Perform proactive threat hunting and behavioral analytics.
• Create and maintain security monitoring content.
• Investigate emerging threats and map detections to MITRE ATT&CK.
• Improve detection coverage for cloud, endpoint, and network environments.
• Build automated response workflows and security analytics dashboards.
• Support detection strategies for AI, GenAI, and LLM-based technologies.

AI / Agentic Systems Development

• Design and implement agentic workflows (ReAct, multi-agent orchestration, tool-augmented agents)
• Build autonomous or semi-autonomous AI agents to handle development, testing, and operational workflows
• Integrate agents with enterprise systems (Jira, Git, ServiceNow, APIs, etc.)
• RAG & Knowledge:
  • Build and optimize Retrieval-Augmented Generation (RAG) pipelines
  • Work with vector databases, embeddings, document chunking, indexing, retrieval tuning
  • Enable enterprise knowledge use cases (e.g., FAQ bots, nuggets/knowledge artifacts, AI copilots)
• Implement evaluation frameworks for LLMs:
  • Functional correctness
  • Experience with AI testing frameworks (e.g., RAGAS, DeepEval, custom evaluation harnesses)
• Build scalable APIs/services (FastAPI, Flask, etc.)
• Ensure performance, observability, and reliability of AI systems

Primary Skills

• Threat Detection Engineering (SIEM/EDR)
• Splunk & Security Analytics

Secondary Skills

• Security Automation (SOAR)
• AI Security & GenAI Monitoring

Experience

• 7+ years of cybersecurity and security operations experience.
• Hands-on experience with Splunk, Sentinel, QRadar, or similar SIEM tools.
• Experience building detection content and threat-hunting methodologies.
• Familiarity with cloud security, EDR technologies, and MITRE ATT&CK framework.

The pay range that the employer in good faith reasonably expects to pay for this position is $49.93/hour - $78.01/hour. Our benefits include medical, dental, vision and retirement benefits. Applications will be accepted on an ongoing basis.

Tundra Technical Solutions is among North America’s leading providers of Staffing and Consulting Services. Our success and our clients’ success are built on a foundation of service excellence. We are an equal opportunity employer, and we do not discriminate on the basis of race, religion, color, national origin, sex, sexual orientation, age, veteran status, disability, genetic information, or other applicable legally protected characteristic. Qualified applicants with arrest or conviction records will be considered for employment in accordance with applicable law, including the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. Unincorporated LA County workers: we reasonably believe that criminal history may have a direct, adverse and negative relationship with the following job duties, potentially resulting in the withdrawal of a conditional offer of employment: client provided property, including hardware (both of which may include data) entrusted to you from theft, loss or damage; return all portable client computer hardware in your possession (including the data contained therein) upon completion of the assignment, and; maintain the confidentiality of client proprietary, confidential, or non-public information. In addition, job duties require access to secure and protected client information technology systems and related data security obligations.