Managed SIEM Detection Engineer

About the Opportunity

We are representing a confidential cybersecurity organization that is expanding its professional services capabilities. Our client is building a detection engineering function that helps enterprises transform underperforming SIEM deployments into strategic security assets. As a Managed SIEM Detection Engineer working through this engagement, you'll deliver hands-on technical work that closes coverage gaps, reduces alert fatigue, and optimizes SIEM operations for organizations struggling with rising costs and limited visibility.

This is a ground-floor opportunity in a growing practice area. You'll work directly with customer environments across multiple SIEM platforms, author and tune detection content against real security use cases, migrate legacy detection logic, and help customers get more value from their security stack. The role offers meaningful autonomy, complex technical challenges, and clear growth potential as the function matures.

Responsibilities

• Deliver end-to-end professional services engagements including detection strategy, MITRE ATT&CK assessment, SIEM optimization, SOAR playbook development, and custom log parsing
• Develop and validate detection content that satisfies defined security use cases with strong coverage and clean fidelity
• Optimize SIEM performance and cost by tuning detections, reducing alert noise, and improving ingestion efficiency
• Translate detection logic between SIEM platforms and write custom parsers for standard and non-standard log sources
• Contribute to the organization's proprietary detection library and continuously improve detection strategy
• Partner with SOC teams to ensure smooth handoff of environments ready for ongoing operations
• Track the evolving threat landscape and translate findings into new detection development
• Build repeatable processes, templates, and tooling that raise the quality and consistency of service delivery

What We're Looking For

Required qualifications:

• Hands-on SIEM expertise across Splunk, Microsoft Sentinel, and/or CrowdStrike NG SIEM, including architecture, data ingestion, and detection rule development
• 3+ years with detection and response tooling, particularly SIEM, SOAR, and EDR
• 3+ years writing, deploying, and tuning custom detections against common datasets (Windows Event Logs, auditd, CloudTrail, and similar)
• SIEM migration experience translating detection logic between platforms and re-pointing log sources
• Working knowledge of attacker tactics and techniques and the MITRE ATT&CK framework
• Solid fundamentals across Windows, macOS, and Linux operating systems
• Networking basics including TCP/IP and the OSI model
• Working knowledge of cloud IAM models and platforms
• Basic proficiency with Python, Go, or similar scripting languages
• Comfort using Git/GitHub for version control of detection content, scripts, and templates
• Willingness to travel up to 20%
• Current work authorization in the United States (visa sponsorship not available)

Preferred qualifications:

• SIEM or vendor certifications such as Splunk Core Certified Power User, Enterprise Security Certified Admin, Microsoft SC-200, or CrowdStrike CCFA/CCFR
• Experience authoring platform-agnostic detections with Sigma and converting rules across SIEM backends
• Familiarity with detection-as-code practices including version-controlled rules, testing, and CI/CD for detection content
• Industry security certifications such as GIAC (GCDA, GCIA), Security+, or similar
• Bachelor's degree in Computer Science or Information Security

How We Work with You

Get A Job.ai represents top candidates to hiring organizations across the technology and security sectors. When you apply through our platform, one of our recruiters will review your background and conduct an initial screening. If there's a strong match, we'll submit your profile to our client and support you through their interview process. Please apply exclusively through Get A Job.ai and do not contact the client organization directly.

This is a remote position available anywhere in the United States.

Equal Employment Opportunity

Get A Job.ai is committed to fair and equitable recruiting practices. We provide equal employment opportunity to all applicants regardless of race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status.