Threat Detection Engineer

📋 Description Design detection logic across SIEM/SOAR platforms (Splunk, Chronicle, Elastic). Build scalable rules, analytics, and anomaly models for MITRE ATT&CK. Develop detection-as-code in Python and YAML formats (Sigma, YARA-L, Kusto). Design and evaluate LLM-assisted detection and triage workflows. Build AI-augmented detection pipelines: anomaly scoring and NLP for phishing. Collaborate with IR and Threat Intel to translate TTPs into detections. 🎯 Requirements 2-4 years in security engineering or security operations. Proficiency with Splunk, Elastic Stack, Google Chronicle, and/or Logstash. Strong Python and SQL programming/scripting. Experience authoring detection logic using YARA-L, Sigma, or equivalents. Demonstrated AI literacy: using LLM APIs or AI/ML for security. Knowledge of IaC and version control (GitHub, Terraform, GitLab CI/CD). 🎁 Benefits Comprehensive medical, dental, vision coverage. 401(k) with company match and parental leave. Unlimited PTO and 8 company holidays. Disability and life insurance coverage. Wellbeing perks: EAP, pet insurance, travel assistance. Learning and development benefits.