8 threat detection engineer jobs at 7 companies in McDonough, GA
3w
Save
Mark Applied
Hide
Threat Detection Engineer
Hoover or Charlotte or Nashville or Atlanta
OnsiteFull Time
8+ YOERequires a high school diploma or GED and 8 years of information security or information technology education and/or experience. Strong Splunk, detection engineering, threat hunting, and cybersecurity skills required.
Splunk Enterprise, Splunk Enterprise Security, SPL, Microsoft Defender, CrowdStrike, Palo Alto, Okta, AWS, Azure, Python, PowerShell, regex, Git, MITRE ATT&CK
3w
Save
Mark Applied
Hide
Senior Security Engineer- Threat Engineering Detection Team
Atlanta or Raleigh or Charlotte
OnsiteFull Time
7+ YOERequires a bachelor's degree or equivalent and 7+ years in security engineering or cybersecurity, with expertise in detection engineering, threat modeling, Splunk, Snowflake, SQL, and complex security technologies.
Anvilogic, Splunk, Snowflake, Snowpipe, Cribl, Databahn, MySQL, PostgreSQL, SQL Server, Python, Docker, Kubernetes, MITRE ATT&CK
1mo
Save
Mark Applied
Hide
Senior Research Engineer, Threat Intelligence
Atlanta or New York City
$140k-$150k/yr RemoteFull Time
5+ YOEBachelor's/Master's in CS or cybersecurity preferred; 5+ years engineering experience in threat intelligence or detection engineering; production experience with Python, TypeScript/Node, cloud (AWS), streaming or batch systems; STIX/TAXII, YARA, Sigma, and production language-model systems.
Python, TypeScript, Node, SQL, AWS, STIX 2.1, TAXII 2.1, MISP, MITRE ATT&CK, YARA, Sigma, STIX Patterning, Splunk, Kinesis, NetFlow, Golang, CEL, OPA, CI/CD
2d
Save
Mark Applied
Hide
Senior Insider Threat Analyst
Atlanta or Boulder or Reston or United States
$152k-$228k/yr HybridFull Time
8+ YOE8+ years in insider threat, security operations, threat hunting, intelligence, investigations, or counterintelligence; detection engineering with UEBA/DLP tools; bachelor's degree or equivalent experience.
Proofpoint, DTEX, Exabeam, Netskope, UEBA, DLP, UAM, SIEM, MITRE ATT&CK, SOAR, APIs
2d
Save
Mark Applied
Hide
DevOps Engineer
Alpharetta, Georgia, United States
HybridFull Time
Experience in security or detection engineering and cloud security; hands-on AWS, Azure, or GCP experience; SIEM, detection-as-code, Git, CI/CD, MITRE ATT&CK, and cloud threat expertise.
Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (GCP), Security Information and Event Management (SIEM), Splunk, Kusto Query Language (KQL), Cloud-Native Application Protection Platform (CNAPP), Git, continuous integration and continuous delivery (CI/CD), MITRE ATT&CK, Wiz, Kubernetes
2mo
Save
Mark Applied
Hide
Insider Threat Investigator
Atlanta or Boulder or Reston
$152k-$228k/yr HybridFull Time
8+ YOE8+ years in insider threat/counterintelligence/corporate investigations or related fields; bachelor’s degree; proficiency with SIEM/UEBA platforms; working knowledge of DLP, endpoint detection, and digital forensics; strong communication and judgment.
SIEM, UEBA, Splunk, QRadar, Sentinel, Exabeam, Proofpoint, DTEX, Purview
1mo
Save
Mark Applied
Hide
Application Security Engineer - ADR
Quincy or Toronto or Austin or Atlanta
$120k-$203k/yr OnsiteFull Time
6+ YOEHands-on experience with application security, ADR/RASP/WAAP, SAST/DAST/SCA, cloud (Azure/AWS), DevSecOps, secure SDLC, threat detection, incident response, and relevant security certifications.
Java, .NET, Python, Node.js, Azure, AWS, SAST, DAST, SCA, API Security, Container Security, Runtime Application Self-Protection (RASP), Web Application and API Protection (WAAP), Ansible, Terraform, Kubernetes, Infrastructure as Code (IaC), Agile, DevOps
1w
Save
Mark Applied
Hide
Senior Security Engineer II
Atlanta or New York City
$149k-$235k/yr HybridFull Time
5+ YOESeveral years owning production cloud security; hands-on AWS, GCP, and self-managed Kubernetes experience; coding ability in Python and Terraform; expertise in threat modeling, detection, incident response, IAM, and platform security.
AWS, GCP, Kubernetes, MongoDB, Python, Terraform, CrowdStrike, Tenable, SIEM, EDR, CSPM, RBAC, IAM, CI/CD