Verified Job
IT / Software / Data Analyst
Threat Detection Engineer
IT / Software / Data Analyst
#720634
Remote / WFH
Sapphire Software Solutions Inc
Job Description
Job Description:
Required Skills & Experience
-5+ years of hands-on detection engineering experience (writing production detection rules and understand correlation)
-MITRE ATT&CK fluency - ability to think in techniques and map a red team finding to a detection gap
Knowledge of SPL - you can write effective Splunk searches and understand what makes a rule expensive or fragile
-Experience with at least one EDR platform at a detection level - CrowdStrike Falcon, Microsoft Defender for Endpoint, etc.
-Understanding of offensive security techniques (understand how attacks work at a technique level)
-Experience validating detections - atomic testing, purple team participation, or equivalent empirical validation methods
-Ability to work with incomplete data - can make a coverage decision with imperfect information and document the reasoning
Required Skills & Experience
-5+ years of hands-on detection engineering experience (writing production detection rules and understand correlation)
-MITRE ATT&CK fluency - ability to think in techniques and map a red team finding to a detection gap
Knowledge of SPL - you can write effective Splunk searches and understand what makes a rule expensive or fragile
-Experience with at least one EDR platform at a detection level - CrowdStrike Falcon, Microsoft Defender for Endpoint, etc.
-Understanding of offensive security techniques (understand how attacks work at a technique level)
-Experience validating detections - atomic testing, purple team participation, or equivalent empirical validation methods
-Ability to work with incomplete data - can make a coverage decision with imperfect information and document the reasoning
