Detection Engineer – SIEM/SOAR

Job not on LinkedIn

🔥 0 minutes ago

🏛️ District of Columbia, Washington – Remote

🏛️ District of Columbia – Remote ☕ Washington – Remote

⏰ Full Time

🟠 Senior

🔴 Lead

👷🏻‍♀️ Engineer

👻 Ghost score 18%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Dragonfli Group

WebsiteLinkedInAll Job Openings

11 - 50 employees

🔒 Cybersecurity

💼 Consulting

Cybersecurity • Consulting

Dragonfli Group is a Washington, DC based LLC specializing in management and technology consulting. The company transforms its clients’ businesses by leveraging high impact strategic planning and technology solutions coupled with expertise in infrastructure, corporate strategy, and operations. Dragonfli Group’s passionate and experienced consultants take a collaborative approach to provide strategic planning and information security solutions to organizations looking to increase profitability, streamline operations, manage risk, meet regulatory demands, and build market share.

📋 Description

• Build automation, AI-driven (“Super Intelligence”/SI), and integration workflows that improve detection and response • Integrate and optimize SIEM, EDR, SOAR, and threat intelligence technologies into a cohesive detection architecture • Analyze requirements and translate operational security needs into technical specifications and implementable solutions • Test, evaluate, and validate detections and automation workflows • Drive continuous improvement based on testing results and operational feedback • Analyze security telemetry to identify anomalies, trends, and detection gaps • Recommend and implement detection enhancements • Create and maintain technical documentation, SOPs, and runbooks • Work with SOC, threat intelligence, and incident response teams • Research and assess emerging security and AI/ML capabilities • Design, implement, and maintain automated and AI-driven security detection and integration capabilities across enterprise security monitoring technologies

🎯 Requirements

• 8+ years of relevant cybersecurity experience in detection engineering, security operations, or a closely related field • 3-8+ years of relevant cybersecurity experience in detection engineering, SOC operations, or security automation (inferred; see Recruiter Notes) • Bachelor's degree in a relevant field, or four additional years of relevant experience in lieu of a degree • U.S. Citizenship or Permanent Residency • All work performed within the continental U.S. • CompTIA Security+ (or equivalent baseline certification) • One of: GCIA, GCIH, or CompTIA CySA+ • Programming/scripting certification or demonstrated proficiency in Python, PowerShell, or similar • Hands-on experience with SIEM and SOAR platforms, such as Splunk Enterprise Security, Splunk SOAR, SentinelOne, and SentinelOne Hyperautomation • Working knowledge of detection engineering methodologies, SOC operations, and incident response • Working knowledge of NIST SP 800-53, CIS Controls, and the MITRE ATT&CK framework • Experience building and maintaining technical documentation, SOPs, and runbooks • Security platform skills including SIEM, EDR, SOAR, API integration, and cloud platforms • Knowledge of Windows, Linux, and Unix operating systems • Preferred: CISSP or GSEC; CompTIA SecAI+; GMON or similar certification; prior federal contracting experience; familiarity with NICE Framework, ISO 27001/27002, FISMA, FedRAMP, OMB circulars, federal cybersecurity directives, and Privacy Act; malware analysis, digital forensics, risk assessment, and machine learning/AI security detection experience

🏖️ Benefits

• Medical — Multiple POS health plan options including an HSA-compatible plan • Dental — PPO coverage for preventive, basic, and major services • Vision — Annual exam, frames, lenses, and contact lens allowance • 401(k) — Employer match up to 5% of eligible compensation • Long-Term Disability — 100% employer-paid coverage at 50% of pre-disability earnings • Life Insurance & AD&D — 100% employer-paid coverage valued at $10,000 each • PTO — 15–25 days annually based on tenure • Paid Federal Holidays — All 11 federal holidays observed