Threat Detection Engineer - SIEM & Threat Intel (Hybrid)

Unity Technologies Corporation; Fort Belvoir (VA); Hybrid; USD 110,000 - 160,000; Full time

Job summary

UnityTec in Fort Belvoir, VA seeks a Threat Detection Engineer to design advanced threat detection use cases and develop custom SIEM scripts to proactively defend critical enterprise systems.

You will collaborate with cybersecurity SMEs, system owners, and Incident Response teams to prioritize high-fidelity alerting, optimize telemetry, and close security gaps across programs. U.S. citizen with DoD Top-Secret clearance preferred; hybrid work may follow initial period.

Qualifications

• Must hold one of the listed cybersecurity certifications.
• 5+ years of IT experience.
• 3+ years with a SIEM in content development or IR.
• 3+ years of system or network administration experience.
• Understanding of log formats and MITRE ATT&CK.
• Strong knowledge of network architecture.
• Defense-in-Depth understanding.
• U.S. citizen and DoD Top-Secret clearance preferred.

Responsibilities

• Threat Detection Engineering & Use Case Development: design, develop, and refine threat detection use cases and custom signatures.
• SIEM Optimization & Automation: develop custom scripts, drive automation, and expand security analytics capabilities.
• Telemetry Optimization & Data Quality Assurance: review and improve telemetry for high-fidelity alerting.
• Security Gap Analysis & Cross-Functional Collaboration: work with SMEs, system owners, and IR to close protection gaps.

Skills

SIEM experience

Threat detection

Networking basics

MITRE ATT&CK knowledge

Scripting

Education

Bachelor's degree in a relevant field

Tools

PowerShell

Python

SPL

Job description

UnityTec in Fort Belvoir, VA seeks a Threat Detection Engineer to design advanced threat detection use cases and develop custom SIEM scripts to proactively defend critical enterprise systems.

You will collaborate with cybersecurity SMEs, system owners, and Incident Response teams to prioritize high-fidelity alerting, optimize telemetry, and close security gaps across programs. U.S. citizen with DoD Top-Secret clearance preferred; hybrid work may follow initial period.