To Apply for this Job Click Here
Role Overview
We’re seeking a REMOTE, hands-on Detection Engineer to support a threat detection and incident response team within a large financial services environment. This role will turn threat intelligence into production-ready detections while helping build and operate AI security agents (“digital teammates”) that support detection and response.
Key Responsibilities
- Build, tune, and deploy threat detections using Splunk and/or CrowdStrike Falcon / NG-SIEM.
- Convert threat intelligence into detections through research, enrichment, tuning, and deployment.
- Design risk-based detections using scoring, correlation, and signal quality.
- Build and operate AI/agent solutions for security detection and response.
- Develop searches, dashboards, threat hunts, and security-data enrichment.
- Analyze large security datasets and communicate findings to technical and business stakeholders.
- Support emergency vulnerability and incident response efforts by rapidly developing new detections and threat hunts.
Required Skills
- Strong detection engineering experience with Splunk and/or CrowdStrike.
- Hands-on experience building AI or agent-based solutions in production.
- Experience across the threat intelligence-to-detection lifecycle.
- Strong security-data analysis and problem-solving skills.
- Excellent communication skills and ability to work through complex, ambiguous problems.
- Must be fully dedicated to this engagement with no concurrent employment or contracts.
Preferred
- Anvilogic or other risk-based alerting frameworks.
- Financial services / regulated industry experience.
- Cribl, Splunk Edge Processor, Snowflake, Databricks, or OpenTelemetry.
- Splunk Cloud migration experience.
- Python or similar scripting/development experience.
1481816_1794605939