Threat Detection Engineer — SIEM & Threat Use Cases (Hybrid)

Unity Technologies Corporation; Richmond (VA); Hybrid; USD 110,000 - 160,000; Full time

Job summary

UnityTec seeks a Threat Detection Engineer in Richmond, VA, to design advanced threat detection use cases and craft SIEM scripts. The role focuses on telemetry optimization, data quality, and cross-functional collaboration to elevate critical systems' defense against threats in a hybrid work setup.

The ideal candidate has 5+ years IT, 3+ years SIEM/IR, and relevant certifications; DoD Top-Secret clearance is required. Strong scripting skills and MITRE ATT&CK knowledge are essential.

Qualifications

• Certifications for CySA+, GCFA, GCIA or GICSP required or preferred.
• Minimum 5 years IT experience and 3+ years in SIEM/IR roles.
• 3+ years system or network administration experience.
• Solid knowledge of log formats and MITRE ATT&CK framework.
• Strong understanding of modern network architectures and defense-in-depth.

Responsibilities

• Develop and refine threat detection use cases and custom SIEM signatures.
• Enhance SIEM automation, analytics, and data quality for accurate alerts.
• Review telemetry data feeds, improve data ingestion fidelity.
• Collaborate with SMEs, system owners, and analysts to prioritize protections.

Skills

CySA+ certification

GCFA certification

GCIA certification

GICSP certification

5+ years IT experience

3+ years with SIEM

3+ years System/Network Admin

Understanding log formats

MITRE ATT&CK framework

Network architecture knowledge

Scripting (PowerShell, Python, SPL)

Defense-in-Depth

Education

Bachelor's degree in a relevant field

Security clearance: DoD Top-Secret

Tools

PowerShell

Python

SPL (Splunk Processing Language)

Job description

UnityTec seeks a Threat Detection Engineer in Richmond, VA, to design advanced threat detection use cases and craft SIEM scripts. The role focuses on telemetry optimization, data quality, and cross-functional collaboration to elevate critical systems' defense against threats in a hybrid work setup.

The ideal candidate has 5+ years IT, 3+ years SIEM/IR, and relevant certifications; DoD Top-Secret clearance is required. Strong scripting skills and MITRE ATT&CK knowledge are essential.