Detection Engineer

Who you are:

• A cybersecurity analyst with 5+ years of experience (minimum 3+ years in a SOC environment)
• Experienced in incident response, triage, threat detection, and alert tuning
• Advanced experience with Splunk ES/Core and writing complex SPL queries is a must
• Familiar with email and endpoint security platforms like Proofpoint TAP/TRAP and CrowdStrike Falcon
• Comfortable with shift work
• A strong communicator who can work collaboratively with cross-functional teams
• Interested in career growth in cybersecurity

It would be awesome if you had:

• Hands-on experience with cloud security platforms like Wiz, Zscaler and Proofpoint Email GW (would be helpful)
• Relevant certifications such as CompTIA Sec+, Net+, OSCP, or CySA+
• Scripting experience (Python, PowerShell) for automation and enrichment
• Experience using AI-tools such as Claude Code, Codex, Cursor, and LLM’s to solve security problems.

What you will do:

• Perform advanced SOC analysis, including triage, incident reporting, and threat hunting
• Help us build security detection content within Splunk Enterprise Security
• Work across ticketing and orchestration platforms to remediate alerts and improve detection
• Support continuous improvement by tuning alerts, managing logs, and automating repetitive tasks