Threat Detection Engineer: SIEM Automation & Threat Intel

Unity Technologies Corporation; Norfolk (VA); Hybrid; USD 95,000 - 135,000; Full time

Job summary

UnityTec in Norfolk, VA is seeking a Threat Detection Engineer to advance detection use cases and develop SIEM scripts to protect critical enterprise systems. You will collaborate with cybersecurity SMEs, system owners, and analysts to optimize telemetry, close capability gaps, and prioritize high-fidelity alerting for key applications.

The role requires 5+ years in IT, experience with SIEM content development or incident response, and strong knowledge of log formats and MITRE ATT&CK.

Qualifications

• Must possess at least one of the following certifications: CompTIA Cybersecurity Analyst Plus (CySA+), GIAC Certified Forensic Analyst (GCFA), GIAC Certified Intrusion Analyst (GCIA), Global Industrial Cyber Security Professional (GICSP).
• A minimum of five (5) years of relevant IT experience.
• A minimum of three (3) years working with a SIEM in a content development or Incident Response role.
• A minimum of three (3) years of System and/or Network Administration experience.
• Understanding of the MITRE ATT&CK framework.
• Understanding of various log formats.

Responsibilities

• Threat Detection Engineering & Use Case Development: design and refine threat detection use cases and custom signatures for programs and critical apps.
• SIEM Optimization & Automation: develop custom scripts, drive automation, and expand security analytics capabilities.
• Telemetry Optimization & Data Quality Assurance: review data feeds and telemetry to ensure high-fidelity data ingestion for accurate alerting.
• Security Gap Analysis & Cross-Functional Collaboration: work with cybersecurity SMEs, system owners, and threat analysts to define alerting priorities and protection strategies.

Skills

Cybersecurity expertise

SIEM content development

Incident response

Threat intelligence integration

Log analysis

Defense-in-Depth

MITRE ATT&CK familiarity

Network architecture

Education

Bachelor's degree

Tools

PowerShell

Python

SPL

Job description

UnityTec in Norfolk, VA is seeking a Threat Detection Engineer to advance detection use cases and develop SIEM scripts to protect critical enterprise systems. You will collaborate with cybersecurity SMEs, system owners, and analysts to optimize telemetry, close capability gaps, and prioritize high-fidelity alerting for key applications.

The role requires 5+ years in IT, experience with SIEM content development or incident response, and strong knowledge of log formats and MITRE ATT&CK.