senior threat detection engineer

DeepSource Technologies

<div>We are seeking an experienced Senior API Security Engineer to join our team on-site. The ideal candidate will have strong expertise in API gateway security, network security solutions, and SIEM integration, with a proven ability to protect enterprise environments against evolving cyber threats.
Key Responsibilities<ul><li>
Design, implement, and manage API security solutions across enterprise environments
</li><li>Configure and maintain API Gateways (e.g., F5, Kong, IBM DataPower)
</li><li>Implement and manage IDS/IPS systems for threat detection and prevention
</li><li>Integrate security solutions with SIEM platforms for monitoring and incident response
</li><li>Develop and enforce API security policies, including rate limiting, authentication, and threat protection
</li><li>Secure APIs by identifying and blocking malicious patterns and automated bot attacks
</li><li>Perform security assessments, vulnerability analysis, and risk mitigation
</li><li>Collaborate with cross-functional teams to ensure secure application delivery</li></ul> 

Requirements 
Minimum 5+ years of experience in API security and network security
Hands-on experience with:
<ul><li>F5 / Kong / IBM DataPower API Gateways
</li><li>IDS/IPS solutions
</li><li>SIEM integration
</li></ul>Strong understanding of:
<ul><li>API security best practices
</li><li>Network security architecture
</li><li>Threat detection and mitigation techniques
</li></ul>Experience in securing APIs against common attack vectors (OWASP, bot attacks, etc.)
Relevant security certifications are mandatory:
<ul><li>CISSP
</li><li>GICSP
</li><li>Or equivalent</li></ul></div>

Senior API Security Engineer - Riyadh, KSA

HCA Healthcare

<div>Do you have the career opportunities as a(an) Senior Security Threat Engineer you want with your current employer? We have an exciting opportunity for you to join HCA Healthcare which is part of the nation's leading provider of healthcare services, HCA Healthcare.
Job Summary
You will be a Cyber Defender &ndash; serving as the last line of defense between HCA and the threat actors that wish to bring harm to HCA and the patients we serve. You will use state of the art technologies to respond to threats on our network and eradicate them as a member of our Critical Threat Services (CTS) team. As a member of CTS, you will operate along with a small team of like-minded individuals with a passion for cyber security operations.
The Senior Threat Engineer will provide Tier 2, and Tier 3 analysis to cyber security threats and potential incidents. In addition to serving as a Subject Matter Expert on all routine cyber threats, the Senior Threat Response Engineer will be capable of independently leading Major Incident Response teams composed of resources from across the enterprise throughout the cyber incident response process.
Successful candidates will have a passion for cybersecurity and be naturally curious and self-motivated to investigate and discover root cause of events while working in a fast-paced and sometimes stressful environment. Good teamwork and communication skills are also vital. Our team operates as a close-knit group serving a noble purpose &ndash; to win the fight against evil every day.
Note: This position requires rotating on-call coverage/availability for after-hours and holidays as needed.
Major Responsibilities<ul><li>
Major Incident Response &ndash; serve as the lead cyber resource in Major Incident response to execute the IR process and advise the business.</li><li>
Provide guidance to field resources on how to properly remediate a threat.</li><li>
Work closely with other Cyber Defense Center (CDC) team members to improve tools, techniques, and procedures for CDC operation.</li><li>
Continuously improve documentation of work products and processes.</li><li>
Participate in red/blue team exercises.</li><li>
Routinely collaborate with individuals and teams from across the enterprise. Serve as a Subject Matter Expert in all domains related to the CDC</li></ul>
Education &amp; Experience:<ul><li>
Bachelor's degree Preferred</li><li>
5+ years of experience in a relevant field Required &bull;Experience as a member of a Cyber Incident Response Team (CIRT) or comparable</li><li>
Experience executing an Incident Response plan, preferably based on recognized industry standards (e.g. &ndash; NIST, SANS, etc)</li><li>
Experience in Windows Artifact Analysis and Forensic Analysis (e.g. &ndash; Program Execution, File/Folder opening, Account Usage, pulling memory, following proper evidence handling procedures, etc) using industry standard tools and available logs (e.g. &ndash; Endpoint Detection and Response (EDR) tools such as Microsoft Defender Endpoint).</li><li>
Experience in Memory Analysis using tools such as Volatility</li><li>
Experience in network forensic analysis to determine validity of detected events using available network logs collected via SEIM.</li><li>
Experience with an event/information analysis framework such as Analysis of Competing Hypotheses (ACH).</li><li>
Experience in performing security analysis or reporting utilizing Security Incident and Event Management (SIEM) Technologies.</li><li>
Experience with document management and sustaining Security Operations Center (SOC) policies and run book procedures for incident response.</li><li>
Experience with documenting root cause analysis and lessons learned.</li><li>
Experience consuming and generating cybersecurity threat intelligence.</li><li>
Experience across the technology stack. Familiarity with all OSI layers and expertise in some.</li><li>
Experiencing using the following types of security tools:</li><li><ul><li>
SIEM oFirewalls</li><li>
Web Proxy</li><li>
Anti-Virus (AV)</li><li>
Next Gen Anti-Virus (NGAV)</li><li>
Endpoint Detection and Response (EDR)</li><li>
Sandboxing oVirtual Machines</li><li>
Netflow analysis</li><li>
Malware Repositories</li><li>
Threat Intelligence</li><li>
Deception Stack</li><li>
Intrusion Detection/Prevention System (IDS/IPS)</li><li>
Security Orchestration Automation Response (SOAR)</li><li>
Phishing Triage oUser Behavior Analytics (UBA)</li><li>
Email Hygiene and Filtering</li></ul></li><li>
Experience interfacing with peer support teams (Security Engineering, Vulnerability and Patching Teams, Networking, Access Management, Legal, Risk/Governance, etc.)</li><li>
Experience working in a high-tempo, dynamic environment with a high performance team.</li><li>
Experience with work ticketing systems (e.g. &ndash; ServiceNow, JIRA)</li><li>
Experience with Threat Modeling and Kill Chain analysis</li></ul>
Other Qualifications<ul><li>
The successful candidate will possess the following aptitudes and skillsets:</li><li><ul><li>
Leadership ability to independently lead and direct Major Incident Response efforts as well as projects.</li><li>
Excellent critical thinking skills to understand available data and use it to support or refute potential hypothesis that explain the data. Use available data to develop and communicate conclusions and recommendations.</li><li>
An ability to work and thrive in stressful situations. A demeanor that conveys calm professionalism in stressful situations.</li><li>
An ability to maintain confidentiality of sensitive data and to follow proper ethical practices for using tools and accessing data.</li><li>
A strong desire to determine root cause of events. A willingness to fully investigate all alternatives exhaustively until a conclusion can be supported.</li><li>
Ability to self-prioritize tasks based on criticality and threat level.</li></ul></li></ul>
The following certifications and courses are helpful, but, not required:<ul><li>
GIAC: GSEC, GCIH, GCFA, GCIA, GCED, GMON, GCDA, GDAT or comparable</li></ul>
Additional Information<ul><li>
Must live in or near the Greater Area of Nashville, TN</li></ul><h5 class="jobSectionHeader">
Benefits</h5>
HCA Healthcare, offers a total rewards package that supports the health, life, career and retirement of our colleagues. The available plans and programs include:<ul><li>
Comprehensive benefits for medical, prescription drug, dental, vision, behavioral health and telemedicine services</li><li>
Wellbeing support, including free counseling and referral services</li><li>
Time away from work programs for paid time off, paid family leave, long- and short-term disability coverage and leaves of absence</li><li>
Savings and retirement resources, including a 401(k) Plan with a 100% match on 3% to 9% of pay (based on years of service), Employee Stock Purchase Plan, flexible spending accounts, preferred banking partnerships, retirement readiness tools, rollover support and financial wellbeing counseling</li><li>
Education support through tuition assistance, student loan assistance, certification support, dependent scholarships and a partnership with Galen College of Nursing</li><li>
Additional benefits for fertility and family building, adoption assistance, life insurance, supplemental health protection plans, auto and home insurance, legal counseling, identity theft protection and consumer discounts</li></ul>
Learn more about Employee Benefits
Note: Eligibility for benefits may vary by location.
HCA Healthcare has been recognized as one of the World's Most Ethical Companies&reg; by the Ethisphere Institute more than ten times. In recent years, HCA Healthcare spent an estimated $3.7 billion in cost for the delivery of charitable care, uninsured discounts, and other uncompensated expenses.
&quot;Bricks and mortar do not make a hospital. People do.&quot;- Dr. Thomas Frist, Sr. 
HCA Healthcare Co-Founder
If you are looking for an opportunity that provides satisfaction and personal growth, we encourage you to apply for our Senior Security Threat Engineer opening. We promptly review all applications. Highly qualified candidates will be contacted for interviews. Unlock the possibilities and apply today!
We are an equal opportunity employer. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.</div>

Senior Security Threat Engineer

Saronic Technologies

<div><div><h2 class="jobSectionHeader">Location</h2>
Austin, TX
</div><div><h2 class="jobSectionHeader">Employment Type</h2>
Full time
</div><div><h2 class="jobSectionHeader">Location Type</h2>
On-site
</div><div><h2 class="jobSectionHeader">Department</h2>
Software</div></div>
 <div><div>Saronic Technologies is a leader in revolutionizing autonomy at sea, dedicated to developing state-of-the-art solutions that enhance maritime operations through autonomous and intelligent platforms.
Security at Saronic is a force multiplier. We're seeking a Security Engineer at the senior-level or above on our Security Operations team with strong detection engineering experience. You'll design and develop high-fidelity detection content, build and operate the data pipelines that power our security operations, develop automation playbooks that accelerate response, and work across a uniquely diverse telemetry landscape spanning cloud infrastructure, embedded vessel platforms, corporate systems, and operational technology. 
<div></div>This role is heavily weighted toward detection engineering. You should think in terms of adversary behavior and telemetry coverage, not just alert triage. You'll own detections end-to-end: from identifying gaps in coverage, through designing and testing detection logic, to tuning and validating in production.
<h1 class="jobSectionHeader">Key Responsibilities:</h1>
<ul><li>Design, build, test, and tune high-fidelity detection rules and analytic queries across endpoint, cloud, network, identity, and DLP telemetry sources
</li><li>Develop and maintain detection content using detection-as-code practices including version-controlled logic, automated testing, and CI/CD deployment
</li><li>Map detection coverage to MITRE ATT&amp;CK, identify gaps, and prioritize new detection development based on threat intelligence and business risk
</li><li>Engineer correlation rules, behavioral analytics, and anomaly-based detections that minimize false positives while surfacing real adversary tradecraft
</li><li>Own the detection lifecycle from initial development through production tuning, performance monitoring, and retirement
</li><li>Build and operate pipelines to ingest, normalize, enrich, and manage security telemetry at scale across diverse data sources, using Terraform and infrastructure-as-code practices to deploy and maintain logging and detection infrastructure
</li><li>Design and maintain log collection, parsing, and enrichment configurations that ensure the right telemetry is available at the right fidelity for detection and investigation
</li><li>Evaluate and onboard new telemetry sources as Saronic's infrastructure and threat landscape evolve
</li><li>Monitor pipeline health, data quality, and ingestion reliability to ensure detections operate on complete and accurate data
</li><li>Develop and manage automated response playbooks in SOAR platforms to accelerate containment and reduce analyst toil
</li><li>Build automation that enriches alerts with contextual data, reducing investigation time and improving analyst decision-making
</li><li>Support incident response efforts and translate lessons learned into improved detections and playbooks
</li><li>Partner with SOC analysts, Cloud Security, Product Security, and IT teams to close visibility and detection gaps across environments
</li><li>Collaborate with threat intelligence to ensure detection engineering is informed by current adversary TTPs relevant to defense, maritime, and autonomous systems
</li></ul><h1 class="jobSectionHeader">Required Qualifications:</h1>
<ul><li>3+ years of hands-on experience in detection engineering, security operations, security automation, or a closely related security engineering role
</li><li>Demonstrated experience designing, testing, and tuning detection rules and analytic queries across production security telemetry (endpoint, cloud, network, identity, or DLP)
</li><li>Hands-on experience with SIEM platforms and proficiency with query languages such as SPL, KQL, or equivalent
</li><li>Experience building and operating security data pipelines, including log ingestion, normalization, enrichment, and data quality management
</li><li>Understanding of data engineering concepts including ETL pipelines, data modeling, schema design, and indexing as applied to security telemetry
</li><li>Hands-on coding experience in Python, PowerShell, Go, or Rust for security automation, detection tooling, or pipeline development, and familiarity with Terraform for managing detection and logging infrastructure as code
</li><li>Understanding of MITRE ATT&amp;CK framework and its application to detection coverage and gap analysis
</li><li>Ability to obtain and maintain a security clearance
</li></ul><h1 class="jobSectionHeader">Preferred Qualifications:</h1>
<ul><li>Experience in defense, aerospace, robotics, autonomy, or other high-assurance environments
</li><li>Experience with EDR platforms including custom detection rule creation and telemetry analysis
</li><li>Experience with cloud-native detection in AWS and Microsoft 365/Azure
</li><li>Experience using Terraform to deploy and manage security monitoring infrastructure, log pipeline components, or cloud-native security service configurations
</li><li>Hands-on experience with incident response, threat hunting, or adversary emulation
</li><li>Exposure to embedded Linux, operational technology, or ICS telemetry and detection
</li><li>Familiarity with NIST SP 800-171, NIST SP 800-53, or CMMC and their logging and monitoring requirements
</li><li>Relevant certifications such as GCIH, GCIA, GCDA, GSOM, OSDA, or OSCP
</li></ul><h1 class="jobSectionHeader">Benefits:</h1>
<ul><li>Medical Insurance: Comprehensive health insurance plans covering a range of services
</li><li>Saronic pays 100% of the premium for employees and 80% for dependents
</li><li>Dental and Vision Insurance: Coverage for routine dental check-ups, orthodontics, and vision care
</li><li>Saronic pays 100% of the premium under the basic plan for employees and 80% for dependents
</li><li>Time Off: Generous PTO and Holidays
</li><li>Parental Leave: Paid maternity and paternity leave to support new parents
</li><li>Competitive Salary: Industry-standard salaries with opportunities for performance-based bonuses
</li><li>Retirement Plan: 401(k) plan
</li><li>Stock Options: Equity options to give employees a stake in the company&rsquo;s success
</li><li>Life and Disability Insurance: Basic life insurance and short- and long-term disability coverage
</li><li>Pet Insurance: Discounted pet insurance options including 24/7 Telehealth helpline
</li><li>Additional Perks: Free lunch benefit and unlimited free drinks and snacks in the office 
</li></ul><div></div>This role requires access to export-controlled information or items that require &ldquo;U.S. Person&rdquo; status. As defined by U.S. law, individuals who are any one of the following are considered to be a &ldquo;U.S. Person&rdquo;: (1) U.S. citizens, (2) legal permanent residents (a.k.a. green card holders), and (3) certain protected classes of asylees and refugees, as defined in 8 U.S.C. 1324b(a)(3).
Saronic does not discriminate on the basis of race, sex, color, religion, age, national origin, marital status, disability, veteran status, genetic information, sexual orientation, gender identity or any other reason prohibited by law in provision of employment opportunities and benefits.</div></div>

Security Engineer, Detection Engineering

Qiddiya Investment Company

<div>Qiddiya Investment Company is seeking an experienced and strategic Manager - Cybersecurity Threat Management to lead our threat management initiatives. In this leadership role, you will be responsible for overseeing the detection, analysis, and mitigation of cybersecurity threats to safeguard the organization's critical information assets and infrastructure.
You will drive the development and execution of advanced threat intelligence programs and incident response strategies, collaborating with various teams to ensure a proactive and effective security posture.
Key Responsibilities<ul>
<li>Lead the cybersecurity threat management program, including threat intelligence collection, analysis, and dissemination.</li>
<li>Oversee incident detection and response activities, ensuring timely and effective handling of security incidents.</li>
<li>Develop and implement advanced threat hunting and mitigation strategies tailored to organizational risks and needs.</li>
<li>Collaborate with internal and external stakeholders to enhance threat intelligence sharing and coordination.</li>
<li>Manage and mentor the cybersecurity threat management team, fostering skill development and knowledge sharing.</li>
<li>Prepare and present threat intelligence reports and risk assessments to senior leadership and stakeholders.</li>
<li>Stay abreast of emerging threats, tactics, and technologies, integrating new knowledge into threat management processes.</li>
<li>Ensure compliance with relevant cybersecurity standards, policies, and regulations.</li> 
</ul> 
 
Requirements 
<ul>
<li>Bachelor's degree in Cybersecurity, Information Technology, or a related field.</li>
<li>6+ years of experience in cybersecurity threat management, incident response, or related fields.</li>
<li>Deep understanding of threat intelligence frameworks, security operations, and incident response methodologies.</li>
<li>Proven leadership and team management experience.</li>
<li>Familiarity with advanced threat detection tools and technologies.</li>
<li>Excellent analytical, communication, and interpersonal skills.</li>
<li>Relevant certifications such as Certified Information Systems Security Professional (CISSP), Certified Threat Intelligence Analyst (CTIA), or GIAC Certified Incident Handler (GCIH) are highly desirable.</li> 
</ul> 
 
Benefits 
Comprehensive benefits package</div>

Manager - Cybersecurity Threat Management

cFocus Software Incorporated

<div><h1 class="jobSectionHeader">Cybersecurity Engineer - Sr. Job Description</h1>
Position Title: Cybersecurity Engineer Sr 
Program: SBA Enterprise Cybersecurity Services (ECS)<h2 class="jobSectionHeader">
Position Summary</h2>
The Cybersecurity Engineer - Sr. supports the Small Business Administration (SBA) Enterprise Cybersecurity Services (ECS) program by delivering advanced cybersecurity engineering, security operations, systems hardening, cloud security, zero trust architecture, and enterprise cyber defense support services. 
The Cybersecurity Engineer - Sr. serves as a senior technical leader responsible for designing, implementing, integrating, securing, and optimizing enterprise security architectures across on-premises, cloud, hybrid, and SaaS environments. The position supports 24x7x365 Security Operations Center (SOC) activities and works closely with federal stakeholders, engineers, SOC analysts, architects, incident responders, and program leadership to enhance the cybersecurity posture of SBA enterprise systems and critical assets.<h2 class="jobSectionHeader">
Essential Duties and Responsibilities</h2><ul><li>
Provide senior-level cybersecurity engineering support for SBA ECS enterprise cybersecurity operations.</li><li>
Support Task Areas 3.5.3 and 3.5.3.9 by designing, implementing, and maintaining secure enterprise security architectures and cybersecurity engineering solutions.</li><li>
Develop and maintain cybersecurity engineering standards, architecture diagrams, implementation strategies, and technical security documentation.</li><li>
Engineer and implement security controls aligned with NIST, FISMA, Zero Trust Architecture (ZTA), and federal cybersecurity requirements.</li><li>
Design, integrate, configure, and support security technologies including SIEM, SOAR, IDS/IPS, EDR, DLP, MFA, PKI, NAC, firewalls, secure web gateways, and cloud-native security solutions.</li><li>
Provide advanced engineering support for Microsoft Azure, Microsoft 365, AWS, hybrid cloud, and enterprise network environments.</li><li>
Support cybersecurity monitoring, detection, containment, remediation, and recovery activities within the SOC environment.</li><li>
Perform enterprise systems hardening, vulnerability remediation, security baseline implementation, and secure configuration management.</li><li>
Conduct cybersecurity architecture assessments, threat modeling, security engineering reviews, and technical risk analysis activities.</li><li>
Support implementation and optimization of Zero Trust security capabilities including identity security, micro-segmentation, continuous monitoring, and least privilege access models.</li><li>
Design and implement cybersecurity solutions supporting cloud migration, DevSecOps, container security, and automation initiatives.</li><li>
Support incident response investigations by providing engineering expertise, log analysis, root cause analysis, and remediation recommendations.</li><li>
Collaborate with cybersecurity operations teams to develop detection logic, security use cases, automated workflows, and threat response procedures.</li><li>
Perform system security engineering activities throughout the system development lifecycle (SDLC) and support Authority to Operate (ATO) initiatives.</li><li>
Develop and maintain security architecture roadmaps, engineering plans, and technology modernization strategies.</li><li>
Perform security engineering analysis of enterprise applications, APIs, databases, cloud services, and network infrastructures.</li><li>
Support cybersecurity compliance efforts related to NIST SP 800-53, NIST SP 800-171, FedRAMP, CISA guidance, and federal cybersecurity mandates.</li><li>
Provide technical leadership and mentoring to junior cybersecurity engineers, SOC personnel, and technical staff.</li><li>
Prepare technical reports, engineering documentation, executive briefings, and operational recommendations.</li><li>
Research emerging cyber threats, adversary tactics, and evolving security technologies to improve enterprise defense capabilities.</li></ul><h2 class="jobSectionHeader">
Minimum Qualifications</h2><ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Computer Science, Information Technology, Information Assurance, Systems Engineering, or related discipline. Relevant experience may substitute for degree requirements.</li><li>
Minimum of 10 years of experience supporting cybersecurity engineering, cybersecurity operations, enterprise security architecture, or SOC environments.</li><li>
Demonstrated experience designing and implementing enterprise cybersecurity architectures and engineering solutions.</li><li>
Hands-on experience with SIEM, SOAR, EDR, IDS/IPS, firewalls, vulnerability management, IAM, cloud security, and security automation technologies.</li><li>
Strong knowledge of NIST cybersecurity frameworks, federal security standards, and Zero Trust Architecture principles.</li><li>
Experience supporting Microsoft Azure, Microsoft 365, AWS, hybrid cloud, and enterprise network infrastructures.</li><li>
Experience performing system hardening, secure configuration management, and vulnerability remediation.</li><li>
Knowledge of incident response methodologies, MITRE ATT&amp;CK framework, cyber kill chain concepts, and adversary TTP analysis.</li><li>
Experience supporting RMF, ATO, continuous monitoring, and federal cybersecurity compliance activities.</li><li>
Strong analytical, troubleshooting, technical writing, and communication skills.</li><li>
Ability to present technical findings and cybersecurity recommendations to executive leadership and technical stakeholders.</li></ul><h2 class="jobSectionHeader">
Preferred Certifications</h2><ul><li>
Certified Information Systems Security Professional (CISSP)</li><li>
Certified Cloud Security Professional (CCSP)</li><li>
GIAC Certified Enterprise Defender (GCED)</li><li>
GIAC Security Expert (GSE)</li><li>
Certified Ethical Hacker (CEH)</li><li>
CompTIA Security+</li><li>
CompTIA CySA+</li><li>
AWS Certified Security &ndash; Specialty</li><li>
Microsoft Certified: Cybersecurity Architect Expert</li><li>
Cisco Certified CyberOps Professional</li></ul>
Q92uPhlSIK</div>

SBA - Cybersecurity Engineer - Sr

Worldpay

<div>Job Description
This position is not eligible for visa sponsorship, now or in the future. Candidates must be a US Citizen or valid Green Card Holder
This position is hybrid 3 days per week in either our Cincinnati, OH or Atlanta, GA office. This position is not eligible for remote work.
Are you ready to write your next chapter?
Make your mark at one of the biggest names in payments. We&rsquo;re looking for a Detection Engineer to join our ever-evolving Threat Detection and Automation team and help us unleash the potential of every business.
What you&rsquo;ll own as the Detection Engineer<ul><li>
Develop custom detection logic across SIEM, EDR, and other security tooling within a cutting-edge technology stack.</li><li>
Leverage threat modeling, detection engineering frameworks, and other creative methods to produce high-fidelity, investigation-worthy alerting.</li><li>
Work closely with cross-functional teams to create tailored, purpose-built security content.</li><li>
Lead technical knowledge sharing sessions to empower other teammates and stay on the forefront of content development &amp; beyond.</li><li>
Possess a &ldquo;detection-as-code&rdquo; mindset to drive security content that is confidently deployed, continuously tested, and expertly tuned.</li><li>
Become immersed in our technology stack and logging to deliver solutions that push the boundaries of our security capabilities. Use this familiarity to present our security teams with the most relevant data to make quick and accurate decisions.</li><li>
Stay current with the latest detection engineering techniques, threat tactics, and industry knowledgebase.</li><li>
Shape the future of our data science and advanced analytic efforts.</li></ul>
What you&rsquo;ll bring<ul><li>
Bachelor&rsquo;s degree in computer science/information systems or the equivalent combination of education, training, or work experience. GSEC, GCIH, CISSP or other security or network certifications desired.</li><li>
Typically requires three or more years of experience with:<ul><li>
Experience with cloud-native data platforms, event streaming and analytic engines. Knowledge of network design and data flow/pipelines.</li><li>
Strong understanding of security data lakes, SIEM, EDR, and interacting with SOAR.</li><li>
High proficiency with SIEM query languages and scripting languages (Python, R, Powershell, SQL/KQL/LQL). Adaptability to new languages and technologies.</li><li>
Clean and thoughtful documentation to enable knowledge sharing and reference materials.</li><li>
Agile project development methodologies and incident case management experience.</li><li>
Familiarity with &ldquo;detection-as-code&rdquo; and implementing CI/CD in detection engineering.</li><li>
Ability to identify untapped value, while also possessing a &ldquo;consumer-first&rdquo; mindset to build outstanding security content.</li><li>
In-depth knowledge of security technologies (encryption, data protection, design, privilege access, etc.).</li></ul></li></ul>
About the team
To learn more about our winning teams, check out our world-class teams that own it every day.
What makes a Worldpayer
What makes a Worldpayer? It&rsquo;s simple: Think, Act, Win. We stay curious, always asking the right questions and finding creative solutions to simplify the complex. We&rsquo;re dynamic, every Worldpayer is empowered to make the right decisions for their customers. And we&rsquo;re determined, always staying open and winning and failing as one.
Does this sound like you? Then you sound like a Worldpayer. Apply now to write the next chapter in your career.
#LI-AD1 

EEOC Statement
Worldpay is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, marital status, genetic information, national origin, disability, veteran status, and other protected characteristics. The EEO is the Law poster is available here.
If you are made a conditional offer of employment and will be working in the United States, you will be required to undergo a drug test. In developing this job description care was taken to include all competencies and requirements needed to successfully perform the position. Reasonable accommodations will be provided for individuals with qualified disabilities both during the hiring process, as well as to allow the individual to perform the essential functions of the job, if hired.</div>

Detection Engineer

<div></div><div><div><div><div><ul><div>2 - 3 Years</div>
<div></div><div>1 Opening</div>
 <div>Hyderabad</div></ul></div><div> 
<div><div>
</div></div></div></div><div></div><div><h3 class="jobSectionHeader">Role description</h3>
<div>Role Overview 
The SIEM Senior Engineer is responsible for hands-on engineering, enrichment, and monitoring of security s using Splunk. This role focuses on building high-quality detections, enriching s with meaningful context, and improving SOC analyst efficiency by reducing false positives and improving signal quality. The role works closely with SOC Analysts, SIEM Leads, and Security Engineering teams. 
Key Responsibilities 
Engineer, maintain, and tune Splunk-based SIEM s and correlation rules. 
Monitor security s to ensure accuracy, relevance, and operational readiness. 
Continuously tune s to improve signal-to-noise ratio and reduce false positives. 
Implement enrichment using identity, asset, vulnerability, and threat intelligence data. 
Ensure s contain actionable context such as user, asset, privilege, and business impact. 
Support Splunk log onboarding, data normalization, and CIM compliance. 
Optimize SPL searches, dashboards, and saved searches. 
Support L2/L3 troubleshooting for SIEM s and ingestion issues. 
Develop detection use cases aligned to the MITRE ATT&amp;CK framework. 
Maintain SOPs, runbooks, and SIEM documentation. 
Required Skills &amp; Experience 
3-5 years of experience in SIEM, SOC, or Security Engineering roles. 
Strong hands-on experience with Splunk
 
Proven experience in SIEM creation, tuning, and enrichment. 
Strong understanding of security telemetry across endpoint, network, cloud, and IAM. 
Proficiency in SPL (Search Processing Language). 
Understanding of SOC workflows and incident triage. 
Familiarity with the MITRE ATT&amp;CK framework. 
Preferred Qualifications 
Experience integrating Splunk with IAM, CMDB, vulnerability, and threat intelligence tools. 
Exposure to SOAR platforms and automated response workflows. 
Scripting experience using Python or PowerShell. 
Experience working in regulated environments such as healthcare or financial services. 
Relevant Splunk or security certifications.</div> 
<h3 class="jobSectionHeader">Skills</h3>
<div>siem,security s, tuning, enrichment,</div></div></div></div>
 <div><h3 class="jobSectionHeader">About UST</h3>
<div>UST is a global digital transformation solutions provider. For more than 20 years, UST has worked side by side with the world&rsquo;s best companies to make a real impact through transformation. Powered by technology, inspired by people and led by purpose, UST partners with their clients from design to operation. With deep domain expertise and a future-proof philosophy, UST embeds innovation and agility into their clients&rsquo; organizations. With over 30,000 employees in 30 countries, UST builds for boundless impact&mdash;touching billions of lives in the process.</div></div>

SIEM Enrichment & Monitoring

Search 10000+ Senior threat detection engineer jobs near you this May. New roles added regularly across leading industries. Apply today.