Cybersecurity Detection Engineer

We are seeking a Threat Detection & Compliance Engineer to help strengthen our cybersecurity posture through the development of detection capabilities, security monitoring, threat hunting, and audit readiness initiatives. This role combines hands-on security engineering with governance, risk, and compliance activities to ensure security controls are effective, measurable, and aligned with regulatory and industry requirements.

Responsibilities

• Design, implement, and maintain threat detection and monitoring capabilities across enterprise environments.


• Develop, tune, and optimize SIEM use cases, detection rules, alerts, and correlation logic to identify potential security threats.


• Conduct proactive threat hunting, security investigations, and event analysis to identify suspicious activity and emerging risks.


• Partner with Security Operations, Incident Response, Infrastructure, and Cloud teams to improve detection coverage and response effectiveness.


• Support internal and external audits by providing evidence, documentation, and responses to audit requests.


• Evaluate security controls and recommend enhancements to improve compliance, risk reduction, and operational effectiveness.


• Assess and align security monitoring practices to regulatory requirements, industry standards, and security frameworks.


• Analyze security logs and telemetry from network, endpoint, cloud, and application environments.


• Develop metrics, dashboards, and reporting to measure detection effectiveness and compliance readiness.


• Automate security monitoring, investigation, and reporting processes through scripting and workflow improvements.


• Participate in incident investigations, root cause analysis, and continuous improvement initiatives.


• Maintain documentation of security controls, monitoring processes, detection logic, and audit artifacts.

Required Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or a related field.


• 5+ years of cybersecurity experience in threat detection, security engineering, security operations, incident response, compliance, audit, or related disciplines.


• Hands-on experience with SIEM platforms such as Microsoft Sentinel, Splunk Enterprise Security, QRadar, or Elastic Security.


• Experience developing and maintaining detection rules, alerting strategies, and security monitoring processes.


• Strong understanding of security auditing principles, risk management practices, and regulatory compliance requirements.


• Experience supporting audits and responding to auditor requests.


• Knowledge of security frameworks and control standards.


• Experience investigating security events, analyzing logs, and identifying threats across enterprise environments.


• Strong understanding of network security, endpoint security, and cloud security monitoring.


• Proficiency with PowerShell, Python, or other scripting languages.