Threat Detection Engineer - Proactive Security & Hunting

CVS Health; Austin (TX); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Bonus program

Equity award program

Comprehensive benefits

Job summary

CVS Health is seeking a Staff Threat Detection Engineer to help stay ahead of evolving cyber threats. You will combine threat hunting, detection engineering, and offensive security expertise to identify risks, strengthen security posture, and enable proactive defense across the organization.

Collaborate with Security Operations, Incident Response, and other teams to develop detections, validate controls, and drive purple team exercises.

Qualifications

• 7+ years in threat detection, hunting, penetration testing, or offensive security.
• 5+ years with Microsoft security tools (Defender for Endpoint, Sentinel), CrowdStrike, and Splunk.
• 3+ years with KQL, SPL, Python, PowerShell, or Bash scripting for automation and detection logic.

Responsibilities

• Develop, deploy, and optimize detection rules across SIEM platforms.
• Conduct threat hunting activities using Defender, CrowdStrike, and other SOC tools.
• Use KQL and SPL to create detections and automate responses.
• Refine detection capabilities based on threats and intelligence.
• Assist with penetration tests and adversary emulation scenarios.
• Produce reports with findings and actionable recommendations.
• Work with blue teams in purple team exercises.
• Integrate threat intelligence into detection strategies.
• Support incident response investigations with adversary tactics insights.
• Contribute to risk-aligned detection strategy.

Skills

Threat detection

Threat hunting

Penetration testing

Offensive security

Automation scripting

KQL

SPL

Python

PowerShell

Bash

Cloud security

Incident response

Purple team

Threat intelligence

Communication skills

Education

Bachelor's degree or equivalent experience

Tools

Microsoft Defender for Endpoint

Microsoft Sentinel

CrowdStrike

Splunk

KQL

SPL

Job description

CVS Health is seeking a Staff Threat Detection Engineer to help stay ahead of evolving cyber threats. You will combine threat hunting, detection engineering, and offensive security expertise to identify risks, strengthen security posture, and enable proactive defense across the organization.

Collaborate with Security Operations, Incident Response, and other teams to develop detections, validate controls, and drive purple team exercises.