Threat Detection Engineer: Purple Team & Threat Hunting

CVS Health; Indianapolis (IN); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Bonus eligibility

Comprehensive benefits

Job summary

CVS Health is seeking a Staff Threat Detection Engineer to enhance threat detection, hunting, and offensive security capabilities. You will work with Security Operations, Incident Response, and other teams to develop detections, validate controls, and automate responses.

The role requires strong analytical skills, curiosity, and a drive to continuously improve how threats are detected and mitigated across the organization.

Qualifications

• 7+ years of experience in threat detection, hunting, penetration testing, and/or offensive security.
• 5+ years of experience in Microsoft Security tools (Defender for Endpoint, Sentinel), CrowdStrike, and Splunk.
• 3+ years of experience with KQL, SPL, Python, PowerShell, or Bash scripting for automation and detection logic.

Responsibilities

• Develop, deploy, and optimize detection rules across SIEM platforms.
• Conduct threat hunting activities to identify advanced threats.
• Design and execute adversary emulation scenarios to assess detection and response.

Skills

Threat hunting

Detection engineering

Offensive security

Automation scripting

Education

Bachelor's degree

Tools

Microsoft Defender for Endpoint

Microsoft Defender for Sentinel

CrowdStrike

Splunk

Job description

CVS Health is seeking a Staff Threat Detection Engineer to enhance threat detection, hunting, and offensive security capabilities. You will work with Security Operations, Incident Response, and other teams to develop detections, validate controls, and automate responses.

The role requires strong analytical skills, curiosity, and a drive to continuously improve how threats are detected and mitigated across the organization.