4d
Save
Mark Applied
Hide
Senior Threat Detection Engineer
Houston, Texas, United States
HybridFull Time
3+ YOE3–5 years in detection engineering or incident response; strong SIEM and threat hunting experience; detection-as-code, Git and CI/CD experience; knowledge of MITRE ATT&CK and cloud/security tooling.
MITRE ATT&CK, Splunk ES, Google SecOps, Sumo Logic, Git, GitHub, Bitbucket, CloudBees, AWS, Azure, GCP, GitHub Copilot, Claude Code
2w
Save
Mark Applied
Hide
Senior Threat Detection Engineer
Bellevue, Washington, United States
$149k-$224k/yr OnsiteFull Time
6+ YOE6+ years experience in threat detection/hunting or incident response; expertise in log correlation and complex query languages (SPL, YARAL); experience with SIEM/EDR/NDR/SOAR and cloud security; related technical degree required.
SPL, YARAL, Splunk, Elastic (ELK), FLINK, Chronicle, AWS, Azure, GCP, SIEM, EDR, NDR, SOAR, Python, MITRE ATT&CK
1w
Save
Mark Applied
Hide
Engineer II, Threat Detection - Windows (Hybrid)
Sunnyvale or New York City or Austin or Redmond
$100k-$145k/yr HybridFull Time
4+ YOEAbility to analyze malware and intrusion telemetry, author behavioral detections for Windows endpoints, use Python/PowerShell for automation, and collaborate with threat intelligence; U.S. citizenship or green card required for CJIS eligibility.
PowerShell, Python, EDR, Regular expressions, MITRE ATT&CK
3w
Save
Mark Applied
Hide
Threat Detection Engineer – Security Operations
Mountain View, California, United States
$113k-$140k/yr OnsiteFull Time
2+ YOE2+ years security engineering/ops experience; proficiency with Splunk/Elastic/Chronicle/Logstash, Python and SQL, YARA-L/Sigma detection formats, LLM APIs/AI literacy, cloud-scale log management, MITRE ATT&CK, and IaC (Terraform/Git).
Splunk, Elastic Stack, Logstash, Google Chronicle (SecOps), Python, SQL, YARA-L, Sigma, Kusto, Lucene, LLM APIs, OpenAI, Anthropic, Google Gemini, Snowflake, Terraform, GitHub, GitLab CI/CD, LangChain, LlamaIndex, SOAR, SIEM
1mo
Save
Mark Applied
Hide
Threat Detection & Automation Engineer
Berkeley Heights or Alpharetta
$146k-$245k/yr OnsiteFull Time
8+ YOE8+ years in cybersecurity/detection engineering with SIEM/SOAR, scripting (Python/SQL/PowerShell/Bash), EDR/IDS/NDR/UEBA/DLP/WAF experience, API integrations, MITRE ATT&CK application; bachelor\u0002s degree or equivalent.
Google SecOps, Python, SQL, PowerShell, Bash, REST, JSON, OAuth, Terraform, Git, SIEM, SOAR, EDR, IDS/NDR, UEBA, DLP, WAF, MCP
3w
Save
Mark Applied
Hide
Senior Threat Detection Engineer
United States or Charleston or Australia or Canada or United Kingdom
$102k-$133k/yr RemoteFull Time
5+ YOE5+ years security engineering/analysis and 5+ years IT/networking experience. Strong Linux/Unix and Windows skills, public cloud (preferably Microsoft Azure), SIEM, scripting (PowerShell, Perl, Python, Bash), packet analysis, APIs, and familiarity with NIST and MITRE ATT&CK.
SIEM, Security Orchestration and Automated Response (SOAR), PowerShell, Perl, Python, Bash, Microsoft Azure, Linux, Unix, Windows, APIs, NIST, MITRE ATT&CK
1mo
Save
Mark Applied
Hide
Senior Engineer – Threat Detection Operations
Brooklyn Park, Minnesota, United States
$98k-$176k/yr HybridFull Time
5+ YOE5+ years cybersecurity experience (3+ years developing detections); 4-year degree or equivalent; experience with SIEM/EDR, cloud security (AWS/GCP/Azure), scripting (Python, PowerShell, Bash), and detection engineering using MITRE ATT&CK.
SIEM, EDR, AWS, GCP, Azure, Python, PowerShell, Bash, MITRE ATT&CK, Cyber Kill Chain, CI/CD, LLMs
2mo
Save
Mark Applied
Hide
Threat Detection Security Engineer
Arlington or Richmond
HybridFull Time
4+ YOE4+ years security engineering; Bachelor's degree; strong documentation/communication; automation scripting; Azure security tooling experience.
Azure security tooling, Python
3d
Save
Mark Applied
Hide
Threat Detection & Response Engineer, Senior (High Level Clearance Required)
Arlington or Pensacola
$119k-$203k/yr RemoteFull Time
10+ YOEActive high-level security clearance,10+ years cybersecurity/IT experience, expertise in threat detection, incident response, network analysis, big data technologies, dashboard development, and analytics.
GreenPlum, Apache Hadoop, Apache Kafka, SQL, KQL, Kibana, Splunk, Databricks Intelligence Platform, Python, JavaScript, Linux/Unix, Windows
2mo
Save
Mark Applied
Hide
Security Detection Engineer
Boston, Massachusetts, United States
$130k-$170k/yr HybridFull Time
4+ YOE4+ years in information security with focus on detection engineering, threat detection, or security operations; experience writing/tuning detections across cloud, identity, endpoint, or applications; strong scripting; familiar with detection tools (YARA, SIGMA, Suricata).
YARA, SIGMA, Suricata, Python, Go, PowerShell
2mo
Save
Mark Applied
Hide
Detection Engineer
Cincinnati or Atlanta
HybridFull Time
3+ YOEThree+ years in security engineering with SIEM/EDR, threat modeling, and content development.
SIEM, EDR, SOAR, Python, R, PowerShell, SQL, KQL, LQL, CI/CD
3d
Save
Mark Applied
Hide
AOUSC - Detection Engineer
Washington, District of Columbia, United States
HybridFull Time
3+ YOEActive Public Trust clearance, BS in CS/IT or related, 3+ years threat hunting/adversary emulation, experience querying large datasets, Python and PowerShell scripting, and detection development in SIEM (Splunk ES or Microsoft Sentinel).
Python, PowerShell, Splunk ES, Microsoft Sentinel, SIEM
3mo
Save
Mark Applied
Hide
Specialist, Cyber Detection Engineer
Newark, New Jersey, United States
$96k-$159k/yr OnsiteFull Time
3+ YOE3+ years in detection engineering, incident response, threat hunting, or security operations; strong SIEM/XDR, telemetry, and detection content skills; Python/PowerShell; MITRE ATT&CK knowledge.
Splunk, SPL, KQL, SQL, PowerShell, Python, REST, GraphQL
2w
Save
Mark Applied
Hide
Cyber Detection Engineer, Lead
Plano, Texas, United States
OnsiteFull Time
3+ YOEDesign and implement detection systems, develop detection rules, leverage threat intelligence, use EDR/SIEM/anti-ransomware/cloud/network/identity tools, apply CI/CD and detection-as-code, and mentor junior SOC members.
EDR, SIEM, anti-ransomware, Cloud, Network, Identity, CI/CD, Detection-as-code, AI/ML, automation, orchestration, CTI, CQL, SQL, KQL, SPL, EQL, Yara, Bash, python
2mo
Save
Mark Applied
Hide
Senior/Staff/Principal AI/ML Engineer - Threat Detection Engineering
New York, New York, United States
RemoteFull Time
7+ YOE7+ years AI/ML engineering in threat detection; expertise in identity security, real-time ML pipelines, and security analytics.
Kafka, Flink, Spark Streaming, Apache Iceberg, Parquet, Sigma, YARA, LLMs, Graph Neural Networks
2mo
Save
Mark Applied
Hide
Threat Detection Security Engineer
Arlington or Richmond
HybridFull Time
4+ YOEBachelor's degree required, 4+ years security engineering experience, incident response and detection expertise, experience with Microsoft/Azure security tooling, Python scripting, MITRE ATT&CK knowledge, strong communication and documentation skills.
MITRE ATT&CK, Microsoft Azure, Microsoft Defender, Microsoft Sentinel, Microsoft EOP, Kubernetes, Python
2d
Save
Mark Applied
Hide
Sr Threat Hunt Engineer
Milwaukee or New York City or Wisconsin
$119k-$178k/yr HybridFull Time
5+ YOE5+ years in threat intelligence/hunting/detection engineering; strong scripting (Python), SIEM/EDR experience, REST API and automation skills, MITRE ATT&CK knowledge, ability to communicate technical findings.
Python, PowerShell, Bash, REST APIs, SIEM, EDR, SOAR, CI/CD, MITRE ATT&CK, OSINT
1mo
Save
Mark Applied
Hide
Cybersecurity Threat Engineer
Los Angeles, California, United States
OnsiteFull Time
6+ YOESenior cybersecurity professional with 6+ years experience in offensive and defensive security, vulnerability management, threat detection, incident response, cloud and infrastructure security, scripting (PowerShell, Python, JavaScript), and integrating automation and SIEM/SOAR tooling.
PowerShell, Python, JavaScript, MITRE ATT&CK, NIST CSF, ISO27001, Center for Internet Security, OWASP, CI/CD, Security Orchestration Automation and Response, Security Information and Event Management, Vulnerability Scanning, Security Threat Feeds, Red Team Tooling
2w
Save
Mark Applied
Hide
Threat Detection and Vulnerability Managment Cybersecurity Engineer
Washington, District of Columbia, United States
OnsiteFull Time
8+ YOEHands-on experience in vulnerability management, threat detection, penetration testing, and implementing federal cybersecurity frameworks; 8+ years cybersecurity engineering experience and strong communication.
Tenable, Nessus, Qualys, Rapid7, SIEM, EDR/XDR, Burp Suite, Metasploit, Nmap, Kali Linux, CrowdStrike Falcon, Microsoft Defender, Microsoft Sentinel, Elastic (ELK), Splunk, AWS, Azure, PowerShell, Python, Bash, MITRE ATT&CK, NIST RMF, NIST 800-53, DISA STIGs
2mo
Save
Mark Applied
Hide
Principal Splunk-Threat Detection & Integrati
United States
RemoteFull Time
Experience onboarding customers into SIEM/XDR/MDR platforms; hands-on with Microsoft Defender XDR and Purview; FedRAMP/FISMA/CMMC experience; data integration; customer-facing documentation.
Microsoft Defender XDR, Microsoft Purview, Microsoft Sentinel, Azure, KQL, Azure Logic Apps, Power Automate, SIEM, Splunk, QRadar, Elastic, Chronicle, CrowdStrike, SentinelOne, AWS CloudTrail, GuardDuty, Syslog, Logstash, Fluentd
Explore Jobs