TED Engineer

To Apply for this Job Click Here

Role Overview

We’re seeking a REMOTE, hands-on Detection Engineer to support a threat detection and incident response team within a large financial services environment. This role will turn threat intelligence into production-ready detections while helping build and operate AI security agents (“digital teammates”) that support detection and response.

Key Responsibilities

• Build, tune, and deploy threat detections using Splunk and/or CrowdStrike Falcon / NG-SIEM.
• Convert threat intelligence into detections through research, enrichment, tuning, and deployment.
• Design risk-based detections using scoring, correlation, and signal quality.
• Build and operate AI/agent solutions for security detection and response.
• Develop searches, dashboards, threat hunts, and security-data enrichment.
• Analyze large security datasets and communicate findings to technical and business stakeholders.
• Support emergency vulnerability and incident response efforts by rapidly developing new detections and threat hunts.

Required Skills

• Strong detection engineering experience with Splunk and/or CrowdStrike.
• Hands-on experience building AI or agent-based solutions in production.
• Experience across the threat intelligence-to-detection lifecycle.
• Strong security-data analysis and problem-solving skills.
• Excellent communication skills and ability to work through complex, ambiguous problems.
• Must be fully dedicated to this engagement with no concurrent employment or contracts.

Preferred

• Anvilogic or other risk-based alerting frameworks.
• Financial services / regulated industry experience.
• Cribl, Splunk Edge Processor, Snowflake, Databricks, or OpenTelemetry.
• Splunk Cloud migration experience.
• Python or similar scripting/development experience.

1481816_1794605939

To Apply for this Job Click Here