[Hiring] Detection Engineer @IS3

Role Description

• Build, test, and deploy new detection rules quickly in monitoring tools such as Splunk and CrowdStrike
• Run threat hunts during emergency vulnerability responses and incidents
• Help the SOC see active exploitation while patches are being applied
• Map detections to MITRE Telecommunication&CK

Qualifications

• 8+ years in SOC or detection engineering
• Hands-on experience building detections and hunts in Splunk (SPL) and CrowdStrike Falcon, including NG SIEM and LogScale queries and custom IOAs
• MITRE Telecommunication&CK mapping
• Availability to be on call and move fast during emergencies

Requirements

• Nice to have: Sigma and YARA
• Detection as code with Git and CI
• Exploit analysis
• SOAR
• Threat intelligence consumption

Preferred Certifications

• GCDA
• GCIA
• GCED
• GCTI
• CrowdStrike CCFA or CCFH
• Splunk certifications

Technology and Frameworks

• Splunk (SPL)
• CrowdStrike Falcon (NG SIEM and LogScale queries, custom IOAs)
• MITRE Telecommunication&CK
• Sigma
• YARA
• Detection as code with Git and CI
• SOAR

Related Job Titles

• Detection Engineer
• Threat Detection Engineer
• Threat Hunter
• Detection & Response Engineer
• SIEM or EDR Content Engineer