Threat Detection Engineer - Purple Team & Threat Hunting

Koitecc Solutions; Olympia (WA); On-site; USD 107,000 - 284,000; Full time

Benefits offered by this job

Comprehensive benefits

Bonus eligibility

Equity incentive

Job summary

CVS Health is seeking a Staff Threat Detection Engineer to drive detection engineering, threat hunting, and adversary emulation. They will collaborate with Security Operations and Incident Response to strengthen the security posture and improve visibility through new tools and automation.

The role requires 7+ years in threat detection, 5+ years with Microsoft security tools, and 3+ years scripting for automation.

Qualifications

• 7+ years in threat detection, hunting, penetration testing and/or offensive security.
• 5+ years with Microsoft security tools (Defender for Endpoint, Sentinel), CrowdStrike, and Splunk.
• 3+ years scripting in Python, PowerShell, or Bash for automation and detection logic.

Responsibilities

• Develop, deploy, and optimize detection rules across SIEM platforms such as Microsoft Sentinel and Splunk.
• Conduct threat hunting activities using Defender, CrowdStrike, and other SOC tools to identify advanced threats.
• Leverage KQL and SPL to create detections and automate responses.
• Assist with internal and external penetration tests to identify vulnerabilities.
• Lead purple team exercises to improve monitoring, alerting, and incident response.
• Integrate threat intelligence into detection strategies and incident response workflows.

Skills

Threat detection

Security tooling

Scripting automation

Education

Bachelor's degree or equivalent experience

Tools

Microsoft Defender for Endpoint

Microsoft Sentinel

CrowdStrike

Splunk

Job description

CVS Health is seeking a Staff Threat Detection Engineer to drive detection engineering, threat hunting, and adversary emulation. They will collaborate with Security Operations and Incident Response to strengthen the security posture and improve visibility through new tools and automation.

The role requires 7+ years in threat detection, 5+ years with Microsoft security tools, and 3+ years scripting for automation.