Threat Detection Engineer

About the role

We are seeking a candidate for a technical detection engineering role focused on logs, telemetry, SIEM integration, and creating actionable alerts. This position involves building and improving threat detection pipelines by working with application logs, event data, and indicators of compromise. The objective is to convert raw data into actionable alerts for Incident Response, Secure AI, Forensics, and Insider Threat teams, enabling them to respond with increased speed and accuracy.

Responsibilities

• Build and improve threat detection pipelines.
• Work with application logs, event data, triggers, and indicators of compromise.
• Convert raw data into actionable alerts for various cybersecurity teams.
• Ingest telemetry into the SIEM and tune detections to reduce noise.
• Create practical, usable alerts to support incident response.
• Support multiple cyber functions with shared detections.

Required Qualifications

Experience: A strong background in Threat Detection Engineering is required. Candidates must have experience with log analysis and parsing, understanding which data is important. Experience should include implementing detections, not only monitoring them.

• Hands-on experience with Palo Alto SIEM is required.
• Proficiency in SIEM integration, including ingesting telemetry and tuning detections, is necessary.
• Experience working with UEBA tools, specifically EverFox/EverInsight, is also a requirement.

Preferred Qualifications

• Experience building dashboards and security reports.
• Prior experience supporting insider threat programs, forensics teams, or AI security monitoring.
• Previous exposure to enterprise-scale Security Operations Center (SOC) environments.

Pay

A compensation range of $65.00 to $80.00 per hour is offered for this position.

Benefits

This employer provides a benefits package available to eligible employees, including medical, dental, vision, life, disability, and other insurance plans; an ESPP (employee stock purchase program); a 401K program with company match after 12 months of tenure; an HSA (Health Savings Account on the HDHP plan); a SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions; a corporate discount savings program and other discounts; an on-demand training program; access to certification prep and a library of technical and leadership courses/books/seminars after 6+ months of tenure; certification discounts and perks for associations such as CompTIA and IIBA; a dedicated customer service team for consultants; and a certified Career Coach. Full details are available in the Welcome Packet provided by an Everforth Apex team member.