We’re looking for a Security Detection Engineer for a remote role.
Skills & Qualifications:
- 8 years of relevant work experience in security architecture
- 5 years of experience with:
- Scripting automation (Python, Bash, PowerShell, or similar)
- Supporting large IT environments and/or system deployments
- Experience with:
- Sigma, Yara, and other industry standard detection languages
- MITRE Telecommunication and CK framework
Preferred Skills:
- Vendor certifications in detection engineering
- Experience with the Palo Alto Cortex XSIAM platform
- Deep understanding of Windows/Linux artifacts
Key Responsibilities:
- Review and tune current detection rules within the SIEM
- Perform gap analysis of the current detection coverage
- Develop detection rules/solutions to cover found gaps
- Monitor threat intelligence sources for new use cases
- Work with analysts to create and tune rules
Education/Certifications:
- Bachelor''s degree in an Information Technology or Information Security related field
- CISSP, CISA, CISO or equivalent advanced security certifications (CEH, OSCP, GPEN) preferred
The salary range for this position is $135,000 - $150,000.
TM Floyd & Company is an equal opportunity employer and values diversity. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability.
We offer a generous array of benefits, depending on the length of assignment. We also offer a referral bonus of up to $1,000. Ask us for more details!
TM Floyd & Company participates in E-VERIFY.
AAP, EEO