1 results (1 new)

Group by company

Maureen Data Systems Inc

Remote • Today

Easy Apply

Contract

80 - 100

Job Details

Skills

KQL
Sigma
Sentinel Analytics Rules
Elastic Detection Rules
MITRE ATT&CK Framework
Git
source control
CI/CD pipelines
Detection-as-Code methodologies
Python
PowerShell
Windows Event Logs
Sysmon
Microsoft Entra ID Sign-In
Endpoint telemetry
Network telemetry
Amazon Web Services
Microsoft Azure
Google Cloud Platform
Microsoft Windows
Splunk
Analytics
Artificial Intelligence
YAML
SPL
SIEM
Incident Management
Dashboard
English
Windows PowerShell
Threat Analysis
Performance Metrics
Security Operations
System On A Chip
Testing
Snort
Workflow
Version Control
Auditing
Cloud Computing
Cloud Security
Collaboration
Communication
Continuous Delivery
Continuous Integration
Design Of Experiments
Documentation
Emulation
Good Clinical Practice
Network
Normalization

KQL
Sigma
Sentinel Analytics Rules
Elastic Detection Rules
MITRE ATT&CK Framework
Git
source control
CI/CD pipelines
Detection-as-Code methodologies
Python
PowerShell
Windows Event Logs
Sysmon
Microsoft Entra ID Sign-In
Endpoint telemetry
Network telemetry
Amazon Web Services
Microsoft Azure
Google Cloud Platform
Microsoft Windows
Splunk
Analytics
Artificial Intelligence
YAML
SPL
SIEM
Incident Management
Dashboard
English
Windows PowerShell
Threat Analysis
Performance Metrics
Security Operations
System On A Chip
Testing
Snort
Workflow
Version Control
Auditing
Cloud Computing
Cloud Security
Collaboration
Communication
Continuous Delivery
Continuous Integration
Design Of Experiments
Documentation
Emulation
Good Clinical Practice
Network
Normalization

Summary

Detection Engineer (Contract)

Location: United States (Remote)
Employment Type: Contract (Full-Time, 40 hours/week)
Duration: Long-term, supporting multiple client projects
Compensation: $80–$100/hour (DOE).

About the Role

We are seeking an experienced Detection Engineer to design, develop, and maintain advanced security detections that enable Security Operations Centers (SOC) to identify and respond to modern cyber threats. This is a long-term contract opportunity supporting multiple enterprise security initiatives, where you will work across SIEM, endpoint, cloud, identity, and network technologies to improve detection coverage and reduce organizational risk.

This role is ideal for someone passionate about threat detection engineering, adversary behaviors, and continuously improving security operations through automation and detection-as-code practices.

Responsibilities

Design, develop, and maintain detection rules, analytics, alerts, dashboards, and threat hunting queries across SIEM, endpoint, identity, cloud, and network platforms.
Author and optimize detections using KQL, Sigma, YAML-based detection rules, and other query languages.
Own the full detection lifecycle, including design, peer review, testing, deployment, versioning, tuning, maintenance, and retirement.
Implement Detection-as-Code practices using source control, peer reviews, and CI/CD pipelines.
Translate threat intelligence, incident response findings, and adversary TTPs into effective and resilient detection logic.
Map detections to the MITRE ATT&CK Framework and identify gaps in detection coverage.
Continuously tune detections to improve fidelity while reducing false positives.
Validate detections through adversary emulation, attack simulations, and threat hunting exercises.
Monitor detection health and performance metrics, including alert volume, precision, and coverage.
Partner with engineering teams to onboard new log sources, improve telemetry quality, and address data gaps.
Develop analyst documentation, including triage guidance, expected false positives, and escalation procedures.
Collaborate closely with SOC analysts, incident responders, threat hunters, red teams, and platform engineers.
Utilize approved AI tools to accelerate documentation, testing, and automation while maintaining human review of all production content.

Required Qualifications

3+ years of experience in Detection Engineering, Security Operations, Threat Hunting, or Incident Response.
Strong experience building and tuning detections within enterprise SIEM platforms.
Experience authoring detection content using KQL, Sigma, Sentinel Analytics Rules, Elastic Detection Rules, or other YAML-based detection frameworks.
Experience operationalizing threat intelligence into actionable detection content.
Strong understanding of the MITRE ATT&CK Framework and adversary tradecraft.
Experience with Git, source control, CI/CD pipelines, and Detection-as-Code methodologies.
Proficiency with Python or PowerShell for automation and testing.
Hands-on experience analyzing:
- Windows Event Logs
- Sysmon
- Microsoft Entra ID Sign-In & Audit Logs
- Endpoint telemetry
- Network telemetry
- Cloud control-plane logs (Azure, AWS, or Google Cloud Platform)
Strong understanding of detection evasion techniques and behavioral detection strategies.
Excellent troubleshooting, documentation, and communication skills.

Preferred Qualifications

Experience with Splunk SPL or additional SIEM query languages.
Experience with YARA, Snort, Suricata, or Zeek.
Experience with adversary emulation or Breach & Attack Simulation (BAS) tools.
Familiarity with normalization schemas such as ASIM, OCSF, or ECS.
Experience integrating detections with SOAR platforms and automated response workflows.
Experience leveraging AI to improve security operations.
Relevant certifications in SIEM, cloud security, incident response, or threat intelligence.

Position Details

Location: Must be authorized to work in the United States.
Language Requirement: English required.
Schedule: Full-time contract (40 hours/week).
Duration: Long-term engagement supporting multiple concurrent security projects.

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.

Dice Id: 10124178
Position Id: 9062741
Posted 11 hours ago

Fitment

Dice Job Match Score™

🔢 Crunching numbers...

Contact the job poster

Spencer Bruns

Recruiter @ Maureen Data Systems Inc

View Profile

Create job alert

Never miss an opportunity! Create an alert based on the job you applied for.

Similar Jobs

Staff Detection Engineer

Remote or New York, New York

•

Today

About Fluidstack We exist to make humanity more free. For most of human history, you farmed or you starved. Technology gave people more time for the things they wanted to do, instead of things they had to do. Powerful AI will be the biggest lever for human choice we've ever built - but only if models are aligned with what humanity actually wants. There are groups building AI who don't share these goals. Whoever deploys frontier compute infrastructure fastest will decide whether AI expands human

Full-time

USD 224,000.00 - 275,000.00 per year

Expert Detection and Response Engineer (Remote)

Remote or Irvine, California

•

Today

Job Title: Expert Detection and Response Engineer (Remote) Requisition ID: R027801 Job Description: Role Overview Activision is seeking an Expert Detection and Response Engineer to help protect our players, studios, platforms, and enterprise environments from advanced cyber threats. As part of our Global Security Operations organization, this role is responsible for actively identifying, investigating, and responding to security threats. This role is highly hands-on and focuses on real-world

Full-time

USD 124,000.00 - 229,400.00 per year

Detection Engineer II

Remote

•

Today

We're transforming the grocery industry At Instacart, we invite the world to share love through food because we believe everyone should have access to the food they love and more time to enjoy it together. Where others see a simple need for grocery delivery, we see exciting complexity and endless opportunity to serve the varied needs of our community. We work to deliver an essential service that customers rely on to get their groceries and household goods, while also offering safe and flexible

Full-time

USD 171,000.00 - 180,500.00 per year

Manager, Detection Engineering (Rapid Response Team)

Remote

•

Today

Our Purpose At SentinelOne, we are driven by a clear purpose: to give the advantage to those who secure our future. As AI reshapes how organizations build, operate, and innovate, the responsibility to protect them becomes more critical than ever. When you join SentinelOne, your work helps protect global enterprises, critical infrastructure, and the technologies shaping tomorrow. If you are motivated by meaningful challenges and want your impact to be real, measurable, and global, you will find

Full-time

USD 164,000.00 - 226,000.00 per year

Job Details

Skills

KQL
Sigma
Sentinel Analytics Rules
Elastic Detection Rules
MITRE ATT&CK Framework
Git
source control
CI/CD pipelines
Detection-as-Code methodologies
Python
PowerShell
Windows Event Logs
Sysmon
Microsoft Entra ID Sign-In
Endpoint telemetry
Network telemetry
Amazon Web Services
Microsoft Azure
Google Cloud Platform
Microsoft Windows
Splunk
Analytics
Artificial Intelligence
YAML
SPL
SIEM
Incident Management
Dashboard
English
Windows PowerShell
Threat Analysis
Performance Metrics
Security Operations
System On A Chip
Testing
Snort
Workflow
Version Control
Auditing
Cloud Computing
Cloud Security
Collaboration
Communication
Continuous Delivery
Continuous Integration
Design Of Experiments
Documentation
Emulation
Good Clinical Practice
Network
Normalization

KQL
Sigma
Sentinel Analytics Rules
Elastic Detection Rules
MITRE ATT&CK Framework
Git
source control
CI/CD pipelines
Detection-as-Code methodologies
Python
PowerShell
Windows Event Logs
Sysmon
Microsoft Entra ID Sign-In
Endpoint telemetry
Network telemetry
Amazon Web Services
Microsoft Azure
Google Cloud Platform
Microsoft Windows
Splunk
Analytics
Artificial Intelligence
YAML
SPL
SIEM
Incident Management
Dashboard
English
Windows PowerShell
Threat Analysis
Performance Metrics
Security Operations
System On A Chip
Testing
Snort
Workflow
Version Control
Auditing
Cloud Computing
Cloud Security
Collaboration
Communication
Continuous Delivery
Continuous Integration
Design Of Experiments
Documentation
Emulation
Good Clinical Practice
Network
Normalization

Summary

Detection Engineer (Contract)

Location: United States (Remote)
Employment Type: Contract (Full-Time, 40 hours/week)
Duration: Long-term, supporting multiple client projects
Compensation: $80–$100/hour (DOE).

About the Role

This role is ideal for someone passionate about threat detection engineering, adversary behaviors, and continuously improving security operations through automation and detection-as-code practices.

Responsibilities

Design, develop, and maintain detection rules, analytics, alerts, dashboards, and threat hunting queries across SIEM, endpoint, identity, cloud, and network platforms.
Author and optimize detections using KQL, Sigma, YAML-based detection rules, and other query languages.
Own the full detection lifecycle, including design, peer review, testing, deployment, versioning, tuning, maintenance, and retirement.
Implement Detection-as-Code practices using source control, peer reviews, and CI/CD pipelines.
Translate threat intelligence, incident response findings, and adversary TTPs into effective and resilient detection logic.
Map detections to the MITRE ATT&CK Framework and identify gaps in detection coverage.
Continuously tune detections to improve fidelity while reducing false positives.
Validate detections through adversary emulation, attack simulations, and threat hunting exercises.
Monitor detection health and performance metrics, including alert volume, precision, and coverage.
Partner with engineering teams to onboard new log sources, improve telemetry quality, and address data gaps.
Develop analyst documentation, including triage guidance, expected false positives, and escalation procedures.
Collaborate closely with SOC analysts, incident responders, threat hunters, red teams, and platform engineers.
Utilize approved AI tools to accelerate documentation, testing, and automation while maintaining human review of all production content.

Required Qualifications

3+ years of experience in Detection Engineering, Security Operations, Threat Hunting, or Incident Response.
Strong experience building and tuning detections within enterprise SIEM platforms.
Experience authoring detection content using KQL, Sigma, Sentinel Analytics Rules, Elastic Detection Rules, or other YAML-based detection frameworks.
Experience operationalizing threat intelligence into actionable detection content.
Strong understanding of the MITRE ATT&CK Framework and adversary tradecraft.
Experience with Git, source control, CI/CD pipelines, and Detection-as-Code methodologies.
Proficiency with Python or PowerShell for automation and testing.
Hands-on experience analyzing:
- Windows Event Logs
- Sysmon
- Microsoft Entra ID Sign-In & Audit Logs
- Endpoint telemetry
- Network telemetry
- Cloud control-plane logs (Azure, AWS, or Google Cloud Platform)
Strong understanding of detection evasion techniques and behavioral detection strategies.
Excellent troubleshooting, documentation, and communication skills.

Preferred Qualifications

Experience with Splunk SPL or additional SIEM query languages.
Experience with YARA, Snort, Suricata, or Zeek.
Experience with adversary emulation or Breach & Attack Simulation (BAS) tools.
Familiarity with normalization schemas such as ASIM, OCSF, or ECS.
Experience integrating detections with SOAR platforms and automated response workflows.
Experience leveraging AI to improve security operations.
Relevant certifications in SIEM, cloud security, incident response, or threat intelligence.

Position Details

Location: Must be authorized to work in the United States.
Language Requirement: English required.
Schedule: Full-time contract (40 hours/week).
Duration: Long-term engagement supporting multiple concurrent security projects.

Dice Id: 10124178
Position Id: 9062741
Posted 11 hours ago

Fitment

Dice Job Match Score™

🔢 Crunching numbers...

Contact the job poster

Spencer Bruns

Recruiter @ Maureen Data Systems Inc

View Profile

Create job alert

Never miss an opportunity! Create an alert based on the job you applied for.

Similar Jobs

Staff Detection Engineer

Remote or New York, New York

•

Today

Full-time

USD 224,000.00 - 275,000.00 per year

Expert Detection and Response Engineer (Remote)

Remote or Irvine, California

•

Today

Full-time

USD 124,000.00 - 229,400.00 per year

Detection Engineer II

Remote

•

Today

Full-time

USD 171,000.00 - 180,500.00 per year

Manager, Detection Engineering (Rapid Response Team)

Remote

•

Today

Full-time

USD 164,000.00 - 226,000.00 per year