detection engineer

Worldpay

<p></p><div><p><b>Job Description</b></p><p><b>
This position is not eligible for visa sponsorship, now or in the future. Candidates must be a US Citizen or valid Green Card Holder</b></p><p></p><p><b>
This position is hybrid 3 days per week in either our Cincinnati, OH or Atlanta, GA office. This position is not eligible for remote work.</b></p><p></p><p><b>
Are you ready to write your next chapter?</b></p><p>
Make your mark at one of the biggest names in payments. We&rsquo;re looking for a Detection Engineer to join our ever-evolving Threat Detection and Automation team and help us unleash the potential of every business.</p><p></p><p><b>
What you&rsquo;ll own as the Detection Engineer</b></p><ul><li><p>
Develop custom detection logic across SIEM, EDR, and other security tooling within a cutting-edge technology stack.</p></li><li><p>
Leverage threat modeling, detection engineering frameworks, and other creative methods to produce high-fidelity, investigation-worthy alerting.</p></li><li><p>
Work closely with cross-functional teams to create tailored, purpose-built security content.</p></li><li><p>
Lead technical knowledge sharing sessions to empower other teammates and stay on the forefront of content development &amp; beyond.</p></li><li><p>
Possess a &ldquo;detection-as-code&rdquo; mindset to drive security content that is confidently deployed, continuously tested, and expertly tuned.</p></li><li><p>
Become immersed in our technology stack and logging to deliver solutions that push the boundaries of our security capabilities. Use this familiarity to present our security teams with the most relevant data to make quick and accurate decisions.</p></li><li><p>
Stay current with the latest detection engineering techniques, threat tactics, and industry knowledgebase.</p></li><li><p>
Shape the future of our data science and advanced analytic efforts.</p></li></ul><p></p><p><b>
What you&rsquo;ll bring</b></p><ul><li><p>
Bachelor&rsquo;s degree in computer science/information systems or the equivalent combination of education, training, or work experience. GSEC, GCIH, CISSP or other security or network certifications desired.</p></li><li><p>
Typically requires three or more years of experience with:</p><ul><li><p>
Experience with cloud-native data platforms, event streaming and analytic engines. Knowledge of network design and data flow/pipelines.</p></li><li><p>
Strong understanding of security data lakes, SIEM, EDR, and interacting with SOAR.</p></li><li><p>
High proficiency with SIEM query languages and scripting languages (Python, R, Powershell, SQL/KQL/LQL). Adaptability to new languages and technologies.</p></li><li><p>
Clean and thoughtful documentation to enable knowledge sharing and reference materials.</p></li><li><p>
Agile project development methodologies and incident case management experience.</p></li><li><p>
Familiarity with &ldquo;detection-as-code&rdquo; and implementing CI/CD in detection engineering.</p></li><li><p>
Ability to identify untapped value, while also possessing a &ldquo;consumer-first&rdquo; mindset to build outstanding security content.</p></li><li><p>
In-depth knowledge of security technologies (encryption, data protection, design, privilege access, etc.).</p></li></ul></li></ul><p></p><p><b>
About the team</b></p><p>
To learn more about our winning teams, check out our world-class teams that own it every day.</p><p></p><p><b>
What makes a Worldpayer</b></p><p>
What makes a Worldpayer? It&rsquo;s simple: Think, Act, Win. We stay curious, always asking the right questions and finding creative solutions to simplify the complex. We&rsquo;re dynamic, every Worldpayer is empowered to make the right decisions for their customers. And we&rsquo;re determined, always staying open and winning and failing as one.</p><p>
Does this sound like you? Then you sound like a Worldpayer. Apply now to write the next chapter in your career.</p><p></p><p>
#LI-AD1</p><br>
<p></p>
<p></p><p><b>EEOC Statement</b></p><p></p><p>
Worldpay is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, marital status, genetic information, national origin, disability, veteran status, and other protected characteristics. The EEO is the Law poster is available here.</p><p></p><p>
If you are made a conditional offer of employment and will be working in the United States, you will be required to undergo a drug test. In developing this job description care was taken to include all competencies and requirements needed to successfully perform the position. Reasonable accommodations will be provided for individuals with qualified disabilities both during the hiring process, as well as to allow the individual to perform the essential functions of the job, if hired.</p></div>

Detection Engineer

CrowdStrike

<div><p>As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn&rsquo;t changed &mdash; we&rsquo;re here to stop breaches, and we&rsquo;ve redefined modern security with the world&rsquo;s most advanced AI-native platform. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We&rsquo;re also a mission-driven company. We cultivate a culture that gives every CrowdStriker both the flexibility and autonomy to own their careers. We&rsquo;re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you.</p><p></p><p><b>
About the Role:</b></p><p>
At CrowdStrike we&rsquo;re on a mission - to stop breaches. Our groundbreaking technology, services delivery, and intelligence gathering together with our innovations in machine learning and behavioral-based detection, allow our customers to not only defend themselves, but do so in a future-proof manner. We&rsquo;ve earned numerous honors and top rankings for our technology, organization and people &ndash; clearly confirming our industry leadership and our special culture driving it.</p><p></p><p>
The opportunity: Our CrowdStrike Data Science Machine Learning Operations and Response Team is looking for a Threat Analyst who is both customer- and team-focused. This role will include both response and pro-active aspects. This role will be perfect for anyone who has experience involving detections and/or reverse engineering. The primary responsibility of this role will be to analyze malware and detections by investigating individual customer detection tickets. This team is focused on improving detection capability and efficiency through analysis of malware or other threat detections impacting our customer base. Experience with detections of potentially malicious behavior by machine learning models is a plus.</p><p></p><p>
Bring your passion for helping internal partners resolve questions about detections of potentially malicious activity by machine learning and our detection capability. Our goal for the team is to both help internal teams respond to customer-inquiries about threat detection and to provide information about the effects of our detections into the Data Science organization - including detection efficacy and managing false positive detections.</p><p></p><p>
This role will work most closely with internal teams such as Technical Account Managers, Falcon Complete, Data Scientists and the Malware Research Center in Data Science.</p><p></p><p><b>
What You'll Do:</b></p><ul><li><p>
Analyze detection data including customer reports to determine which aspects of the machine learning models can be improved</p></li><li><p>
Perform tasks to enable better-management of false positive detections</p></li><li><p>
Analyze binary files to determine their legitimacy</p></li><li><p>
Review current product detections to ensure they are performing to the company standard</p></li><li><p>
Address internal questions and concerns regarding customer threat detections</p></li></ul><p><b><br>
What You'll Need:</b></p><p>
Required:</p><ul><li><p>
Exposure and understanding of different types and functionality of malware</p></li><li><p>
Experience with reverse engineering malware, or malware operations</p></li><li><p>
Knowledge of programming and scripting languages, in particular Python</p></li><li><p>
Fundamental understanding of attributes of binary files such as imports/exports and packers</p></li><li><p>
Ability to demonstrate practical knowledge of research/collection skills and analytical methods</p></li><li><p>
General understanding of threat/risk management and threat/risk assessment</p></li><li><p>
Familiarity with various operating systems</p></li><li><p>
Ability to break down complex problems into workable components</p></li></ul><p><br>
Preferred:</p><ul><li><p>
Experience in a security operations center or similar environment responding to incidents</p></li><li><p>
A thorough understanding of Windows OS internals and the Windows API</p></li><li><p>
Knowledge of MacOS and/or Linux</p></li><li><p>
Familiarity with tools used in targeted and criminal cyber-intrusions</p></li><li><p>
A background in exploit and vulnerability analysis</p></li><li><p>
Knowledge of a variety of programming languages including C, C++, Java, and assembly</p></li><li><p>
Experience with threat detections by machine learning</p></li></ul><p></p><div><div><div><div><div><div><div><div><div><p>
#LI-Remote<br>
#LI-AO1</p></div></div></div></div></div></div></div></div></div><p></p><p><b>
Benefits of Working at CrowdStrike:</b></p><ul><li><p>
Market leader in compensation and equity awards</p></li><li><p>
Comprehensive physical and mental wellness programs</p></li><li><p>
Competitive vacation and holidays for recharge</p></li><li><p>
Paid parental and adoption leaves</p></li><li><p>
Professional development opportunities for all employees regardless of level or role</p></li><li><p>
Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections</p></li><li><p>
Vibrant office culture with world class amenities</p></li><li><p>
Great Place to Work Certified&trade; across the globe</p></li></ul><p></p><p>
CrowdStrike is proud to be an equal opportunity employer. We are committed to fostering a culture of belonging where everyone is valued for who they are and empowered to succeed. We support veterans and individuals with disabilities through our affirmative action program.</p><p></p><p>
CrowdStrike is committed to providing equal employment opportunity for all employees and applicants for employment. The Company does not discriminate in employment opportunities or practices on the basis of race, color, creed, ethnicity, religion, sex (including pregnancy or pregnancy-related medical conditions), sexual orientation, gender identity, marital or family status, veteran status, age, national origin, ancestry, physical disability (including HIV and AIDS), mental disability, medical condition, genetic information, membership or activity in a local human rights commission, status with regard to public assistance, or any other characteristic protected by law. We base all employment decisions-including recruitment, selection, training, compensation, benefits, discipline, promotions, transfers, lay-offs, return from lay-off, terminations and social/recreational programs-on valid job requirements.</p><p></p><p>
If you need assistance accessing or reviewing the information on this website or need help submitting an application for employment or requesting an accommodation, please contact us at recruiting@crowdstrike.com for further assistance.</p><p></p><p>
Find out more about your rights as an applicant.</p><p></p><p>
CrowdStrike participates in the E-Verify program.</p><p></p><p>
Notice of E-Verify Participation</p><p>
Right to Work</p><p></p>
CrowdStrike, Inc. is committed to fair and equitable compensation practices. Placement within the pay range is dependent on a variety of factors including, but not limited to, relevant work experience, skills, certifications, job level, supervisory status, and location. The base salary range for this position for all U.S. candidates is $90,000 - $125,000 per year, with eligibility for bonuses, equity grants and a comprehensive benefits package that includes health insurance, 401k and paid time off.<p></p><p>
For detailed information about the U.S. benefits package, please click here.</p></div><p></p>

Machine Learning Detection Engineer (Remote, East/Central)

Saronic Technologies

<div><div><h2 class="jobSectionHeader"><b>Location</b></h2>
<p>Austin, TX</p>
</div><div><h2 class="jobSectionHeader"><b>Employment Type</b></h2>
<p>Full time</p>
</div><div><h2 class="jobSectionHeader"><b>Location Type</b></h2>
<p>On-site</p>
</div><div><h2 class="jobSectionHeader"><b>Department</b></h2>
<p>Software</p></div></div>
<br><div><div><p>Saronic Technologies is a leader in revolutionizing autonomy at sea, dedicated to developing state-of-the-art solutions that enhance maritime operations through autonomous and intelligent platforms.</p>
<p></p><p>Security at Saronic is a force multiplier. We're seeking a Security Engineer at the senior-level or above on our Security Operations team with strong detection engineering experience. You'll design and develop high-fidelity detection content, build and operate the data pipelines that power our security operations, develop automation playbooks that accelerate response, and work across a uniquely diverse telemetry landscape spanning cloud infrastructure, embedded vessel platforms, corporate systems, and operational technology.</p><br>
<div></div><p>This role is heavily weighted toward detection engineering. You should think in terms of adversary behavior and telemetry coverage, not just alert triage. You'll own detections end-to-end: from identifying gaps in coverage, through designing and testing detection logic, to tuning and validating in production.</p>
<p></p><h1 class="jobSectionHeader"><b>Key Responsibilities:</b></h1>
<ul><li><p>Design, build, test, and tune high-fidelity detection rules and analytic queries across endpoint, cloud, network, identity, and DLP telemetry sources</p>
</li><li><p>Develop and maintain detection content using detection-as-code practices including version-controlled logic, automated testing, and CI/CD deployment</p>
</li><li><p>Map detection coverage to MITRE ATT&amp;CK, identify gaps, and prioritize new detection development based on threat intelligence and business risk</p>
</li><li><p>Engineer correlation rules, behavioral analytics, and anomaly-based detections that minimize false positives while surfacing real adversary tradecraft</p>
</li><li><p>Own the detection lifecycle from initial development through production tuning, performance monitoring, and retirement</p>
</li><li><p>Build and operate pipelines to ingest, normalize, enrich, and manage security telemetry at scale across diverse data sources, using Terraform and infrastructure-as-code practices to deploy and maintain logging and detection infrastructure</p>
</li><li><p>Design and maintain log collection, parsing, and enrichment configurations that ensure the right telemetry is available at the right fidelity for detection and investigation</p>
</li><li><p>Evaluate and onboard new telemetry sources as Saronic's infrastructure and threat landscape evolve</p>
</li><li><p>Monitor pipeline health, data quality, and ingestion reliability to ensure detections operate on complete and accurate data</p>
</li><li><p>Develop and manage automated response playbooks in SOAR platforms to accelerate containment and reduce analyst toil</p>
</li><li><p>Build automation that enriches alerts with contextual data, reducing investigation time and improving analyst decision-making</p>
</li><li><p>Support incident response efforts and translate lessons learned into improved detections and playbooks</p>
</li><li><p>Partner with SOC analysts, Cloud Security, Product Security, and IT teams to close visibility and detection gaps across environments</p>
</li><li><p>Collaborate with threat intelligence to ensure detection engineering is informed by current adversary TTPs relevant to defense, maritime, and autonomous systems</p>
</li></ul><p></p><h1 class="jobSectionHeader"><b>Required Qualifications:</b></h1>
<ul><li><p>3+ years of hands-on experience in detection engineering, security operations, security automation, or a closely related security engineering role</p>
</li><li><p>Demonstrated experience designing, testing, and tuning detection rules and analytic queries across production security telemetry (endpoint, cloud, network, identity, or DLP)</p>
</li><li><p>Hands-on experience with SIEM platforms and proficiency with query languages such as SPL, KQL, or equivalent</p>
</li><li><p>Experience building and operating security data pipelines, including log ingestion, normalization, enrichment, and data quality management</p>
</li><li><p>Understanding of data engineering concepts including ETL pipelines, data modeling, schema design, and indexing as applied to security telemetry</p>
</li><li><p>Hands-on coding experience in Python, PowerShell, Go, or Rust for security automation, detection tooling, or pipeline development, and familiarity with Terraform for managing detection and logging infrastructure as code</p>
</li><li><p>Understanding of MITRE ATT&amp;CK framework and its application to detection coverage and gap analysis</p>
</li><li><p>Ability to obtain and maintain a security clearance</p>
</li></ul><p></p><h1 class="jobSectionHeader"><b>Preferred Qualifications:</b></h1>
<ul><li><p>Experience in defense, aerospace, robotics, autonomy, or other high-assurance environments</p>
</li><li><p>Experience with EDR platforms including custom detection rule creation and telemetry analysis</p>
</li><li><p>Experience with cloud-native detection in AWS and Microsoft 365/Azure</p>
</li><li><p>Experience using Terraform to deploy and manage security monitoring infrastructure, log pipeline components, or cloud-native security service configurations</p>
</li><li><p>Hands-on experience with incident response, threat hunting, or adversary emulation</p>
</li><li><p>Exposure to embedded Linux, operational technology, or ICS telemetry and detection</p>
</li><li><p>Familiarity with NIST SP 800-171, NIST SP 800-53, or CMMC and their logging and monitoring requirements</p>
</li><li><p>Relevant certifications such as GCIH, GCIA, GCDA, GSOM, OSDA, or OSCP</p>
</li></ul><p></p><h1 class="jobSectionHeader"><b>Benefits:</b></h1>
<ul><li><p><b>Medical Insurance: </b>Comprehensive health insurance plans covering a range of services</p>
</li><li><p>Saronic pays 100% of the premium for employees and 80% for dependents</p>
</li><li><p><b>Dental and Vision Insurance: </b>Coverage for routine dental check-ups, orthodontics, and vision care</p>
</li><li><p>Saronic pays 100% of the premium under the basic plan for employees and 80% for dependents</p>
</li><li><p><b>Time Off: </b>Generous PTO and Holidays</p>
</li><li><p><b>Parental Leave: </b>Paid maternity and paternity leave to support new parents</p>
</li><li><p><b>Competitive Salary: </b>Industry-standard salaries with opportunities for performance-based bonuses</p>
</li><li><p><b>Retirement Plan:</b> 401(k) plan</p>
</li><li><p><b>Stock Options:</b> Equity options to give employees a stake in the company&rsquo;s success</p>
</li><li><p><b>Life and Disability Insurance:</b> Basic life insurance and short- and long-term disability coverage</p>
</li><li><p><b>Pet Insurance:</b> Discounted pet insurance options including 24/7 Telehealth helpline</p>
</li><li><p><b>Additional Perks:</b> Free lunch benefit and unlimited free drinks and snacks in the office</p><br>
</li></ul><div></div><p><i>This role requires access to export-controlled information or items that require &ldquo;U.S. Person&rdquo; status. As defined by U.S. law, individuals who are any one of the following are considered to be a &ldquo;U.S. Person&rdquo;: (1) U.S. citizens, (2) legal permanent residents (a.k.a. green card holders), and (3) certain protected classes of asylees and refugees, as defined in </i><i>8 U.S.C. 1324b(a)(3)</i><i>.</i></p>
<p>Saronic does not discriminate on the basis of race, sex, color, religion, age, national origin, marital status, disability, veteran status, genetic information, sexual orientation, gender identity or any other reason prohibited by law in provision of employment opportunities and benefits.</p></div></div><p></p>

Security Engineer, Detection Engineering

Mercor

<div>
 <strong>
  About The Job
  <br/>
  <br/>
 </strong>
 <strong>
  Mercor
 </strong>
 connects elite creative and technical talent with leading AI research labs. Headquartered in San Francisco, our investors include
 <strong>
  Benchmark
 </strong>
 ,
 <strong>
  General Catalyst
 </strong>
 ,
 <strong>
  Peter Thiel
 </strong>
 ,
 <strong>
  Adam D'Angelo
 </strong>
 ,
 <strong>
  Larry Summers
 </strong>
 , and
 <strong>
  Jack Dorsey
 </strong>
 .
 <br/>
 <br/>
 <strong>
  Position:
 </strong>
 Cybersecurity Engineer - Blue Team
 <br/>
 <br/>
 <strong>
  Type:
 </strong>
 <strong>
  Contract
  <br/>
  <br/>
 </strong>
 <strong>
  Compensation:
 </strong>
 <strong>
  $85&ndash;$140/hour
  <br/>
  <br/>
 </strong>
 <strong>
  Location:
 </strong>
 <strong>
  Remote
  <br/>
  <br/>
 </strong>
 <strong>
  Role Responsibilities
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Design and build benchmark tasks grounded in real SOC and detection engineering work.
  </li>
  <li>
   Construct realistic evaluation environments, including multi-host networks, Active Directory, and cloud control planes.
  </li>
  <li>
   Define what "correct" looks like for blue-team AI reasoning and build infrastructure to measure it reproducibly at scale.
  </li>
  <li>
   Translate blue-team workflow experience into rigorous evaluation design.
  </li>
  <li>
   Work independently and asynchronously to meet deadlines while improving AI model performance.
   <br/>
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Qualifications
  <br/>
  <br/>
 </strong>
 <strong>
  Must-Have
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Hands-on blue-team experience in detection engineering, threat hunting, incident response, or malware analysis.
  </li>
  <li>
   Strong scripting and cloud/enterprise environment skills.
   <br/>
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Application Process (Takes 20&ndash;30 mins to complete)
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Upload resume
  </li>
  <li>
   AI interview based on your resume
  </li>
  <li>
   Submit form
   <br/>
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Resources &amp; Support
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   For details about the interview process and platform information, please check: https://talent.docs.mercor.com/welcome
  </li>
  <li>
   For any help or support, reach out to: support@mercor.com
   <br/>
   <br/>
   <br/>
  </li>
 </ul>
 <em>
  PS: Our team reviews applications daily. Please complete your AI interview and application steps to be considered for this opportunity.
  <br/>
  <br/>
 </em>
 #hiringmercor
</div>


Cyber Security Engineer - AI Trainer

Amazon.com

<div><h2 class="jobSectionHeader"><b>DESCRIPTION</b></h2><div>
Amazon Defensive Security&rsquo;s Threat Detection team provides threat detection coverage for all of Amazon. In other words, we&rsquo;re the people who keep Amazon secure from threat actors. We provide coverage to all of Amazon &amp; it subsidiaries across endpoint, cloud, network and application vectors ensuring Amazon infrastructure and customers data is secured. We work on the most challenging problems that are influenced with thousands of variables&mdash; and we&rsquo;re on the lookout for talented individuals eager to make an impact.<br>
<br>
You&rsquo;ll be part of a diverse team spanning software and security engineering disciplines. You&rsquo;ll collaborate with leaders across Amazon Security to help us build complex threat detection product, delivering comprehensive threat detection coverage at optimal business costs. And you&rsquo;ll experience an inclusive culture that welcomes bold ideas and empowers you to own them to completion. Our product is at the forefront of innovating the sophisticated, low-latency, high-performance threat detection solutions. Our industry-leading solutions are critical to safeguarding Amazon's success and protecting customer data.<br>
<br>
The successful candidate is expected to contribute to all parts of the software development and deployment lifecycle, including design, development, documentation, testing and operations. They must possess strong verbal and written communication skills, be self-driven and deliver high quality results in a fast paced environment. They will also need to be proactive and jump on to the problems quickly to come out with innovative solutions and operate with minimal guidance.<br>
<br>
Key job responsibilities<br>
<ul><li>Manage critical components of our threat detection platform that processes millions of messages in a day</li><li>Evaluate different design choices, prototype new technology, and implement technical solutions that address business requirements</li><li>Contribute in defining product roadmap, understand business impact of system choices, and make technical trade-offs using sound judgement</li><li>Work closely with product leadership, security partners to understand the requirements, design and deliver innovative solutions to raise bar on customer trust.</li><li>Drive engineering best practices around operational excellence, security, test automation coverage and set standards in the team</li><li>Deal with ambiguity, make data-driven decisions and juggle cross-organization complexity</li><li>Drive consensus when confronted with discordant views by identifying the best path forward and influence other to follow it</li></ul><br>
About the team<br>
Why Amazon Defensive Security?<br>
At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon&rsquo;s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.<br>
<br>
Diverse Experiences<br>
Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn&rsquo;t followed a traditional path, or includes alternative experiences, don&rsquo;t let it stop you from applying.<br>
<br>
Inclusive Team Culture<br>
In Amazon Security, it&rsquo;s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.<br>
<br>
Training &amp; Career Growth<br>
We&rsquo;re continuously raising our performance bar as we strive to become Earth&rsquo;s Best Employer. That&rsquo;s why you&rsquo;ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.<br>
<br>
Work/Life Balance<br>
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there&rsquo;s nothing we can&rsquo;t achieve.</div><h2 class="jobSectionHeader"><b>
BASIC QUALIFICATIONS</b></h2><ul><li>3+ years of non-internship professional software development experience</li><li>2+ years of non-internship design or architecture (design patterns, reliability and scaling) of new and existing systems experience</li><li>Experience programming with at least one software programming language</li></ul><h2 class="jobSectionHeader"><b>
PREFERRED QUALIFICATIONS</b></h2><ul><li>3+ years of full software development life cycle, including coding standards, code reviews, source control management, build processes, testing, and operations experience</li><li>Bachelor's degree in computer science or equivalent</li></ul><br>
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.<br>
<br>
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you&rsquo;re applying in isn&rsquo;t listed, please contact your Recruiting Partner.<p><br>
The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life &amp; AD&amp;D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.</p><br>
USA, TX, Austin - 143,700.00 - 194,400.00 USD annually<br>
USA, WA, Seattle - 143,700.00 - 194,400.00 USD annually</div><p></p>

Software Development Engineer II, Security Products

Peraton

<div><div><h5 class="jobSectionHeader"><b>ABOUT PERATON</b></h5><p>
Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world&rsquo;s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees solve the most daunting challenges that our customers face. Visit peraton.com to learn how we&rsquo;re keeping people around the world safe and secure.</p></div><div><h5 class="jobSectionHeader"><b>
ABOUT THE ROLE</b></h5><div><div>
We are seeking a highly skilled and innovative Threat Intelligence Analyst to join our team in the greater DMV area, supporting the Army National Guard.</div><div></div><div><br>
Responsibilities</div><ul><li>
Collect, fuse, and analyze threat intelligence from ACERT, DISA, ARCYBER, US‑CERT, commercial feeds, and enterprise telemetry to build an accurate threat picture for the ARNG environment.</li><li>
Map adversary TTPs to local technologies, CDAP/CHAP findings, and control gaps; prioritize detections, hunts, and mitigation actions.</li><li>
Produce and distribute threat briefs, IOCs, analytic notes, dashboards, and executive summaries to SOC, hunters, detection engineers, CIRT, DCO, and leadership.</li><li>
Develop enrichment logic, correlation rules, and intelligence‑driven detection/use cases to operationalize intelligence into SIEM/EDR/SOAR workflows.</li><li>
Validate indicators and detection logic with SOC analysts, incident responders, and engineering teams; support hunt missions and incident investigations with contextual intelligence.</li><li>
Track adversary campaigns, malware trends, vulnerability exploit patterns, and translate into mission‑focused recommendations for defensive measures.</li><li>
Maintain threat repositories, automation playbooks, and analytic artifacts to enable repeatable, machine‑readable intel workflows and situational awareness.</li><li>
Liaise with external intel partners and keep abreast of emerging tools, techniques, and reporting to inform enterprise readiness and response posture.</li></ul><div>
#ENOCS</div></div></div><div></div><div><h5 class="jobSectionHeader"><b><br>
QUALIFICATIONS</b></h5><div><div>
Qualifications</div><ul><li>
Minimum of 8 years with BS/BA; Minimum of 6 years with MS/MA; Minimum of 3 years with PhD</li><li><div>
Clearance: Active TS/SCI clearance.</div></li><li><div>
Candidate must meet ONE of the following:</div><ul><li>
Master&rsquo;s degree or Ph.D. in Strategic Intelligence, Cybersecurity Risk Management, Computer Science, Data Science, Information Systems, Information Technology, or a related field; OR</li><li>
Relevant DoD/IC advanced training (examples: DIA Advanced Cyber Threat Analysis; National Cryptologic School advanced cyber intelligence courses; SANS FOR578); OR</li><li>
Relevant professional certification or equivalent experience (examples: CISSP; CompTIA CASP+; GIAC GCIA; GIAC GREM; CREST CCTIM).</li></ul></li><li><div>
Required experience and skills:</div><ul><li>
Cyber threat intelligence, analysis, or related analytic experience with at least 3 years performing senior TI roles supporting SOC/CIRT or DoD missions.</li><li>
Expertise mapping TTPs to MITRE ATT&amp;CK, developing IOCs, and producing decision‑grade analytic products and executive briefings.</li><li>
Proficiency with TI platforms, TIPs, SIEM/EDR integration, enrichment pipelines, and threat data automation.</li><li>
Strong analytic writing, briefing, and stakeholder engagement skills to translate intelligence into operational tasks and strategic recommendations.</li></ul></li><li><div>
Desired:</div><ul><li>
Prior experience supporting ARCYBER, NETCOM, RCC‑ARNG, or joint/IC threat intelligence operations.</li><li>
Familiarity with malware analysis, reverse‑engineering outputs, and integrating CTI into detection engineering and hunt workflows.</li></ul></li></ul><div>
#ENOCS</div></div></div><div><h5 class="jobSectionHeader"><b>
DETAILS</b></h5><div><p>
<b>Target Salary Range:</b> $104,000 - $166,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual&rsquo;s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.
</p></div><div><p>
<b>Benefits Statement:</b> Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.
</p></div><div><p>
<b>Application Statements:</b> The application period for the job is estimated to be 30 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates. By applying to this job, you are expressing interest in the role and the Company. During the review of your application, you may be required to participate in an on-camera interview, as well as participate in a process to verify your identity.
</p></div><p><b>
EEO:</b> Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.</p></div></div><div></div>

THREAT INTELLIGENCE ANALYST

<div><div><h5 class="jobSectionHeader"><b>ABOUT PERATON</b></h5><p>
Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world&rsquo;s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees solve the most daunting challenges that our customers face. Visit peraton.com to learn how we&rsquo;re keeping people around the world safe and secure.</p></div><div><h5 class="jobSectionHeader"><b>
ABOUT THE ROLE</b></h5><div><div>
We are seeking a highly skilled and innovative Threat Hunter to join our team in the greater DMV area, supporting the Army National Guard.</div><div></div><div><br>
Responsibilities</div><ul><li>
Lead proactive threat‑hunting operations: develop hypotheses, analytic campaigns, and hunting workflows to detect sophisticated adversary behaviors across networks, endpoints, cloud, and OT/DCI systems.</li><li>
Build behavioral detection logic, long‑term analytic patterns, and anomaly models mapped to MITRE ATT&amp;CK TTPs.</li><li>
Leverage threat intelligence, incident trends, CDAP findings, and vulnerability data to prioritize high‑risk hunt objectives and scope.</li><li>
Conduct deep forensic and telemetry analysis to uncover lateral movement, persistence mechanisms, credential misuse, and stealthy C2 activity.</li><li>
Develop hunt playbooks, repeatable methodologies, and validation procedures to elevate enterprise hunting maturity.</li><li>
Integrate hunting outputs into SOC, CIRT, RCC‑ARNG, NETCOM, and ARCYBER operations by delivering actionable detections, validated indicators, and threat behavior insights.</li><li>
Collaborate with detection engineering to convert hunt findings into high‑fidelity detections, tune SIEM/EDR rules, and expand telemetry coverage.</li><li>
Produce detailed technical reports, intelligence briefs, and executive summaries to inform remediation, detection priorities, and strategic risk decisions.</li><li>
Drive continuous improvement: identify telemetry gaps, enhance data‑enrichment pipelines, automate analytic processes, and evaluate emergent hunting tools and techniques.</li></ul><div>
#ENOCS</div></div></div><div></div><div><h5 class="jobSectionHeader"><b><br>
QUALIFICATIONS</b></h5><div><div>
Qualifications</div><ul><li>
Minimum of 8 years with BS/BA; Minimum of 6 years with MS/MA; Minimum of 3 years with PhD</li><li><div>
Clearance: Active TS/SCI clearance.</div></li><li><div>
Candidate must meet ONE of the following:</div><ul><li>
Master&rsquo;s degree or Ph.D. in Computer Science, Cybersecurity, Data Science, Information Systems, Information Technology, Software Engineering, or a related field; OR</li><li>
Relevant DoD/military training (examples: 4‑11‑C32‑255S (CP); 4C‑255N (CP); 4C‑255A (CP); M0923W1; A‑531‑4417; Cyber Defense Analyst (Advanced) Playlist); OR</li><li>
Relevant professional certification or equivalent experience (examples: CBROPS; CFR; CySA+; GCFA; GCIA; GICSP).</li></ul></li><li><div>
Required experience and skills:</div><ul><li>
Cyber threat analysis, hunting, or advanced detection experience with at least 3 years leading hunt operations or detection programs in enterprise or DoD contexts.</li><li>
Deep expertise in telemetry analytics, log forensics, memory/disk analysis, and threat‑hunting toolchains (SIEM, EDR, network forensics).</li><li>
Proven ability to author hunt hypotheses, design validation tests, and operationalize findings into detection engineering and incident response workflows.</li><li>
Strong familiarity with MITRE ATT&amp;CK, threat‑intelligence integration, adversary emulation, and validation methodologies.</li><li>
Excellent technical writing and briefing skills for producing reproducible hunt artifacts, IOC packages, and executive‑level intelligence products.</li></ul></li><li><div>
Desired:</div><ul><li>
Prior DoD/ARNG threat‑hunting or CDAP experience and experience coordinating with ARCYBER/NETCOM/RCC‑ARNG.</li><li>
Experience with automation of hunting workflows, advanced analytics (ML/behavioral models), and large‑scale telemetry platforms.</li></ul></li></ul><div>
#ENOCS</div></div></div><div><h5 class="jobSectionHeader"><b>
DETAILS</b></h5><div><p>
<b>Target Salary Range:</b> $104,000 - $166,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual&rsquo;s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.
</p></div><div><p>
<b>Benefits Statement:</b> Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.
</p></div><div><p>
<b>Application Statements:</b> The application period for the job is estimated to be 30 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates. By applying to this job, you are expressing interest in the role and the Company. During the review of your application, you may be required to participate in an on-camera interview, as well as participate in a process to verify your identity.
</p></div><p><b>
EEO:</b> Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.</p></div></div><div></div>

THREAT HUNTER

Search 4315+ Detection engineer jobs near you this May. New roles added regularly across leading industries. Apply today.