Senior Detection Engineer

Job not on LinkedIn

🔥 3 minutes ago

🎸 Tennessee – Remote

🎸 Tennessee – Remote

⏰ Full Time

🟠 Senior

👷🏻‍♀️ Engineer

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

SAIC

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1969

☁️ SaaS

📣 Marketing

🏢 Enterprise

💰 $500M Post-IPO Debt - SAIC on 2025-09

SaaS • Marketing • Enterprise

SAIC is represented in the supplied content by marketing and product copy that matches Bitly — a cloud-based link management and QR-code platform. The material describes a SaaS offering for URL shortening, dynamic QR Codes, link analytics, mobile-friendly landing pages, branded links, UTM campaign tracking, digital business cards, developer APIs and AI-enhanced features. It targets marketers, developers, and enterprises across industries (retail, CPG, hospitality, media, healthcare, finance, education) and emphasizes integrations, analytics, and enterprise-grade capabilities. Note: the provided text appears to be Bitly’s website content rather than information about SAIC; if you intended the defense/technology firm SAIC (Science Applications International Corporation), please provide relevant content.

📋 Description

• Develop, deploy, and maintain high-fidelity detections across SIEM, EDR, and other security telemetry platforms • Validate alerts, refine workflows, and align detections with operational analyst needs • Provide detection-focused support during active incidents, including tuning recommendations, data enrichment, and technical guidance • Tune and optimize detections to improve fidelity, reduce false positives, strengthen efficiency, and close visibility gaps • Perform advanced threat and telemetry analysis to confirm detection performance and identify adversary behaviors • Translate cyber threat intelligence, TTPs, indicators, and behavioral patterns into actionable detections • Partner with CTI, Offensive Security Operations, and Purple-Team operators to validate detection logic through adversary emulation • Convert threat-hunting discoveries, vulnerability insights, and purple-team findings into improved detection logic and monitoring • Maintain documentation for detection logic, tuning actions, workflows, and operational standards • Mentor Detection Engineering analysts and support Detection & Response personnel development • Contribute to ESOC/DCO improvement initiatives, engineering sprints, automation, detection content onboarding, and process refinement • Lead post-incident detection reviews and improve detection coverage • Enhance ESOC dashboards, analytics, and tooling for monitoring, triage, and investigations • Support 24/7/365 operational coverage during high-priority events • Perform additional operational duties as assigned

🎯 Requirements

• Bachelor’s degree and 5+ years related experience, or a Master’s degree and 3+ years of related experience • An additional 4+ years of experience may be considered in lieu of a degree • Minimum of 3 years of cybersecurity operations experience working with the enterprise SIEM Splunk • Must possess CySA+, SSCP, or equivalent certification • Must obtain Splunk Certified Cybersecurity Defense Engineer certification within six months of hire • Advanced proficiency in Splunk SPL and Python for security automation and workflow development • Strong leadership skills with ability to lead and motivate a team effectively • Excellent verbal and written communication skills • Ability to multitask and collaborate to solve complex technical problems • Must support 24/7/365 operations when required

🏖️ Benefits

• Remote work option for qualified candidates • 4×10 schedule, Monday–Thursday, 07:00 a.m. EST–5:00 p.m. EST • Opportunity to mentor analysts and contribute to professional capability development