Detection Engineer

🔥 20 minutes ago

🤠 Texas – Remote

🤠 Texas – Remote

⏰ Full Time

🟢 Junior

🟡 Mid-level

👷🏻‍♀️ Engineer

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Binary Defense

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2014

💼 Consulting

🎖️ Defense

🏥 Healthcare

💰 Private Equity Round on 2022-11

Consulting • Defense • Healthcare

Binary Defense is a cybersecurity firm that provides a range of security services designed to protect businesses from digital threats. The company operates as an extension of client teams, offering managed detection and response, co-managed SIEM, threat hunting, and digital risk protection services around the clock. With a focus on increasing security visibility and reducing complexity, Binary Defense uses a combination of human expertise and technology to offer comprehensive threat detection and response. Their services also include phishing response and incident response, all delivered through a 24/7 security operations center. By integrating advanced threat intelligence and tactical remediation strategies, Binary Defense aims to stay ahead of emerging cyber threats, ensuring the safety of client digital assets.

📋 Description

• Design and implement detections using a detection-as-code approach across SIEM (e.g., Splunk, Sentinel, Chronicle) and EDR platforms (e.g., CrowdStrike, Cortex XDR, SentinelOne). • Develop and operationalize detection logic in YAML/Sigma/YARA-L, including documentation, tuning, testing, and version control. • Leverage APIs to automate rule deployment, validation, and telemetry inspection—reducing reliance on GUIs. • Collaborate with Threat Intel, Incident Response, and Cloud Security teams to create threat-informed detections based on real-world attack behaviors. • Contribute to threat modeling efforts to identify high-value detection opportunities and coverage gaps. • Analyze telemetry sources (e.g., Windows Event Logs, Sysmon, cloud logs, network traffic) to identify detection use cases and ensure telemetry readiness. • Participate in adversary simulation and detection validation efforts using tools such as Atomic Red Team, Caldera, or custom scripting. • Support documentation of detection logic, coverage rationale, and response guidance. • Actively contribute to continuous improvement of detection engineering workflows, tooling, and standards.

🎯 Requirements

• 2–5+ years of hands-on experience in detection engineering, threat hunting, or incident response. • Strong proficiency with Python and REST APIs for interacting with EDR/SIEM platforms and automating detection workflows. • Demonstrated experience writing, tuning, and validating detection logic in at least one of: Sigma, YARA-L, Splunk SPL, KQL, XQL. • Experience with telemetry sources including Windows security logs, Sysmon, firewall/proxy logs, and cloud platform audit logs. • Familiarity with MITRE ATT&CK and how to map detections to adversary techniques and detection choke points. • Ability to quickly learn new security technologies and adapt detection strategies accordingly. • Comfortable working in a fast-paced environment where threat-driven detection and rapid iteration are the norm.

🏖️ Benefits

• Competitive medical, dental and vision coverage for employees and dependents • 401k match which vests every payroll • Flexible and remote friendly work environment • Training opportunities to expand your skill set