We are looking for a
Detection Engineering Lead for potential upcoming work. This would be part of an opportunity for our Partner to expand their footprint within a Federal IT sector.
Requirements- US Citizenship
- Ability to obtain a Public Trust Clearance
- OSCP or GXPN
- 5 years within IR in a large SOC (over 5,000 endpoints) with at least 3 years focused on proactive detection engineering, threat hunt, or adversary emulation
- 3 years of experience with demonstrated proficiency in forming hypothesis, querying large datasets and identifying APT behavior
- 2 years' experience with demonstrated proficiency in scripting languages including Python and PowerShell to develop new tools
- 2 years' experience with demonstrated proficiency developing detections in a SIEM (utilizing Splunk ES or Microsoft Sentinel)
