22 threat detection engineer jobs at 18 companies in Carney, MD
2w
Save
Mark Applied
Hide
Manager, Threat Detection Engineer
Washington, District of Columbia, United States
$160k-$180k/yr HybridFull Time
5+ YOEBachelor's required,5+ years cybersecurity experience,4+ years detection engineering and threat intelligence,hands-on detection development and tuning,automation and API integration experience,experience with SIEM/EDR/SOAR and detection languages.
MITRE ATT&CK, SIEM, EDR, XDR, SOAR, Sigma, KQL, SPL, XQL, YARA-L, EQL, SQL, YARA, APIs
3w
Save
Mark Applied
Hide
Threat Hunter/Detection Engineer - Tier 3
Fort Meade, Maryland, United States
$130k-$150k/yr OnsiteFull Time
5+ YOEBachelor's in cybersecurity or related, 5+ years cybersecurity experience (threat hunting/detection/IR), DoD 8570/8140 IAT Level III, advanced cert (GCTI/GCFA/OSCP/CISSP), SIEM/SOAR and scripting proficiency.
SIEM, SOAR
1mo
Save
Mark Applied
Hide
Threat Detection & Response Engineer, Senior (High Level Clearance Required)
Arlington or Pensacola
$119k-$203k/yr RemoteFull Time
10+ YOEActive high-level security clearance,10+ years cybersecurity/IT experience, expertise in threat detection, incident response, network analysis, big data technologies, dashboard development, and analytics.
GreenPlum, Apache Hadoop, Apache Kafka, SQL, KQL, Kibana, Splunk, Databricks Intelligence Platform, Python, JavaScript, Linux/Unix, Windows
1mo
Save
Mark Applied
Hide
AOUSC - Detection Engineer
Washington, District of Columbia, United States
HybridFull Time
3+ YOEActive Public Trust clearance, BS in CS/IT or related, 3+ years threat hunting/adversary emulation, experience querying large datasets, Python and PowerShell scripting, and detection development in SIEM (Splunk ES or Microsoft Sentinel).
Python, PowerShell, Splunk ES, Microsoft Sentinel, SIEM
2mo
Save
Mark Applied
Hide
Threat Detection Specialist, Trust and Safety - USDS
Washington, District of Columbia, United States
$99k-$179k/yr OnsiteFull Time
3+ YOE3+ years in Trust & Safety/intelligence/content policy; experience using LLMs or AI/ML tools, collaborating with Product/Engineering, strong investigative and analytical skills.
LLMs, SQL, Python, computer vision, NLP
3mo
Save
Mark Applied
Hide
Threat Detection Security Engineer
Arlington or Richmond
HybridFull Time
4+ YOEBachelor's degree required, 4+ years security engineering experience, incident response and detection expertise, experience with Microsoft/Azure security tooling, Python scripting, MITRE ATT&CK knowledge, strong communication and documentation skills.
MITRE ATT&CK, Microsoft Azure, Microsoft Defender, Microsoft Sentinel, Microsoft EOP, Kubernetes, Python
1mo
Save
Mark Applied
Hide
Senior Research Engineer, Threat Intelligence
Washington, District of Columbia, United States
$140k-$150k/yr RemoteFull Time
5+ YOE5+ years engineering experience in threat intelligence, detection, or security research; production engineering skills with Python/TypeScript/Node; experience with STIX/TAXII, YARA/Sigma, cloud (AWS), and building data/pipeline systems.
Python, TypeScript/Node, STIX 2.1, TAXII 2.1, MISP, MITRE ATT&CK, YARA, Sigma, STIX Patterning, AWS, Golang, Splunk, Kinesis, NetFlow, CEL, OPA, SQL, CI/CD
3w
Save
Mark Applied
Hide
Threat Informed Defense Senior Manager
Arlington, Virginia, United States
$123k-$311k/yr OnsiteFull Time
10+ YOE5+ Mgmt10+ years in cyber threat intelligence, threat-informed defense, detection engineering, threat hunting, or security operations; 5+ years leading technical teams and using security stacks, MITRE ATT&CK, and threat data standards.
Threat Intelligence Platform (TIP), Security Information and Event Management (SIEM), Security Orchestration, Automation and Response (SOAR), Endpoint Detection and Response (EDR), YARA, Sigma, MITRE ATT&CK, MITRE D3FEND, STIX/TAXII, NIS2, DORA
1mo
Save
Mark Applied
Hide
Threat Informed Defense Senior Manager
Arlington, Virginia, United States
$123k-$311k/yr OnsiteFull Time
10+ YOE5+ Mgmt10+ years in cyber threat intelligence/threat-informed defense/detection engineering/threat hunting/SOAR/SIEM/EDR; 5+ years leading technical teams; Bachelor's degree or equivalent; familiarity with structured threat data and MITRE ATT&CK.
TIP, SIEM, SOAR, EDR, MITRE ATT&CK, YARA, Sigma, STIX/TAXII, D3FEND, MxDR, MDR
1w
Save
Mark Applied
Hide
Security Engineer
Bellevue or Menlo Park or Washington or New York City
$271k-$347k/yr OnsiteFull Time
15+ YOE15+ years managing security risk; experience with distributed systems, access control, encryption, intrusion detection, system design, threat modeling, engineered controls, and communicating technical risk to senior leadership.
2mo
Save
Mark Applied
Hide
Principal Product Manager - Threat Detection Engine and Content (Hybrid)
Arlington or New York or Austin or Sunnyvale or Redmond
$160k-$250k/yr HybridFull Time
5+ YOE5+ years in product management for detection content, SIEM, XDR, cloud security; large-scale distributed systems; strong communication; willing to travel up to 20%; onsite 1-3 days/week; BA/BS, Master’s desirable.
Distributed Systems, Threat Detection, Security Analytics, Cloud Security, XDR, SIEM
2w
Save
Mark Applied
Hide
Identity Security Engineer
Washington, District Of Columbia, United States
$120k-$130k/yr HybridFull Time
5+ YOE5+ years identity security and Windows server engineering experience; hands-on Microsoft Entra ID, PIM, AD/ADFS/GPO, Zero Trust, and identity threat detection; scripting/automation and security documentation skills.
Microsoft Entra ID (Azure Active Directory), Privileged Identity Management (PIM), Microsoft Active Directory, Active Directory Federation Services, Group Policy Objects (GPOs), Microsoft Defender for Identity, Splunk, PowerShell, Bash, Python, Microsoft Azure, AWS IAM, SAML, OAuth 2.0, OpenID Connect, Kerberos, SIEM, Microsoft License Management
2mo
Save
Mark Applied
Hide
Cyber Security Project Engineer - TS/SCI w/Polygraph
McLean, Virginia, United States
$152k-$206k/yr OnsiteFull Time
8+ YOE8+ years of related cyber security experience; TS/SCI with active polygraph clearance; Bachelor's degree in a related field; strong incident response, threat detection, forensics, and cloud security skills.
Incident Response, Cyber Defense, Threat Detection, Forensics, Cloud Security, Security Event Correlation Tools
3w
Save
Mark Applied
Hide
SOC Analyst
Crownsville, Maryland, United States
OnsiteFull Time
Monitor, detect, and analyze threats; perform threat hunting, triage incidents, develop SIEM rules, support incident response; bachelor's in CS/IS/engineering/business preferred and relevant security certifications.
Wireshark, VirusTotal, Splunk, Python, PowerShell, VBScript
1w
Save
Mark Applied
Hide
Enterprise Cybersecurity Analyst
McLean, Virginia, United States
$99k-$225k/yr OnsiteFull Time
Cybersecurity operations or security engineering experience, threat detection or incident response, vulnerability assessment, cross-functional collaboration, and a bachelor's degree. U.S. citizenship required.
CrowdStrike Falcon EDR/AV, Tenable Cloud Security Enterprise, BigID, Security Information and Event Management (SIEM), Security Orchestration, Automation, and Response (SOAR), Python, PowerShell, AWS, Azure, Google Cloud, Risk Management Framework (RMF), NIST 800-53, Defense Federal Acquisition Regulation Supplement (DFARS)
1w
Save
Mark Applied
Hide
Enterprise Cybersecurity Analyst
McLean, Virginia, United States
$99k-$225k/yr HybridFull Time
Cybersecurity operations or security engineering experience, threat detection or incident response, vulnerability assessment support, a bachelor's degree, and U.S. citizenship; cloud and DoD security experience preferred.
CrowdStrike Falcon EDR/AV, Tenable Cloud Security Enterprise, BigID, Security Information and Event Management (SIEM), Security Orchestration, Automation, and Response (SOAR), Python, PowerShell, AWS, Azure, Google Cloud, Risk Management Framework (RMF), NIST 800-53, Defense Federal Acquisition Regulation Supplement (DFARS)
1mo
Save
Mark Applied
Hide
Purple Team Manager (Defense Improvement Analysis)
McLean or Plano or Richmond
$179k-$225k/yr OnsiteFull Time
4+ YOERequires 4+ years in information security, 3+ years in threat hunting or detection engineering, and 2+ years analyzing EDR telemetry; high school diploma or GED required.
Databricks, Spark, EDR
1w
Save
Mark Applied
Hide
IT Specialist (InfoSec)
Rockville, Maryland, United States
$144k-$187k/yr OnsiteFull Time
1+ YOERequires one year of GS-13-equivalent specialized experience engineering enterprise security tools, developing threat detections, analyzing security metrics, and conducting incident response and digital forensics.
SIEM, SOAR, EDR, IDS/IPS, digital forensics, IaaS, PaaS, SaaS, Zero Trust, USA Hire, USAJOBS, Microsoft Excel
1w
Save
Mark Applied
Hide
Cybersecurity Principal Specialist - Hunt Network #5302
Washington, District of Columbia, United States
$144k-$196k/yr OnsiteFull Time
7+ YOE7–10 years cybersecurity experience with 5+ years in threat hunting/network forensics/IR, leadership of project teams, ability to obtain Secret clearance, scripting proficiency, and experience with network forensics and detection engineering.
Wireshark, Zeek, Suricata, Snort, Sigma, YARA, MITRE ATT&CK, Python, PowerShell, Bash, Ruby, Perl, Cisco IOS, Solaris
2w
Save
Mark Applied
Hide
Security Operations Center (SOC) Tier 3 Analyst / Incident Responder
Baltimore, Maryland, United States
OnsiteFull Time
8+ YOE8+ years cybersecurity experience with 6+ years SOC experience; bachelor\u0002s degree or equivalent; 2+ DFIR/forensics years; requires multiple certifications (e.g., GCFA, GCIH, CISSP); deep expertise in enterprise incident response, detection engineering, and threat hunting.
Elastic Security, KQL, ES|QL/EQL, SQL, PowerShell, Python, Bash, CrowdStrike Falcon, Microsoft Defender XDR, Defender for Endpoint, Defender for Identity, Defender for Office 365, Defender for Cloud, Defender for Cloud Apps, Elastic, EDR/XDR, NDR, SIEM, SOAR, IDS/IPS, WAF, firewalls, VPN, DNS, DHCP, proxy, CASB, DLP, IAM, PAM, Kubernetes, Azure, AWS, Microsoft 365, Microsoft Entra ID, VMware, Hyper-V
Explore Jobs