BGH Scout Logo

Threat Detection Engineer

Beacon Hill · Commercial & Professional Services
Viewed by 2 job seekers
Share:
Job Description:
To Apply for this Job Click Here Location: Remote EST We are seeking a Threat Detection Engineer to help strengthen our cybersecurity posture through the development of detection capabilities, security monitoring, threat hunting, and audit readiness initiatives. This role combines hands-on security engineering with governance, risk, and compliance activities to ensure security controls are effective, measurable, and aligned with regulatory and industry requirements. Responsibilities Design, implement, and maintain threat detection and monitoring capabilities across enterprise environments. Develop, tune, and optimize SIEM use cases, detection rules, alerts, and correlation logic to identify potential security threats. Conduct proactive threat hunting, security investigations, and event analysis to identify suspicious activity and emerging risks. Partner with Security Operations, Incident Response, Infrastructure, and Cloud teams to improve detection coverage and response effectiveness. Support internal and external audits by providing evidence, documentation, and responses to audit requests. Evaluate security controls and recommend enhancements to improve compliance, risk reduction, and operational effectiveness. Assess and align security monitoring practices to regulatory requirements, industry standards, and security frameworks. Analyze security logs and telemetry from network, endpoint, cloud, and application environments. Develop metrics, dashboards, and reporting to measure detection effectiveness and compliance readiness. Automate security monitoring, investigation, and reporting processes through scripting and workflow improvements. Participate in incident investigations, root cause analysis, and continuous improvement initiatives. Maintain documentation of security controls, monitoring processes, detection logic, and audit artifacts. Required Qualifications Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or a related field. 5+ years hands on detection engineering experience. Must have hands on Threat Detection Engineering experience, creating and maintaining SIEM rules at scale, scripting experience (Powershell or Python), creating detection content, and building correlation rules. 5+ years of cybersecurity experience in threat detection, security engineering, security operations, incident response, compliance, audit, or related disciplines. Hands-on experience with SIEM platforms such as Microsoft Sentinel, Splunk Enterprise Security, QRadar, or Elastic Security. Experience developing and maintaining detection rules, alerting strategies, and security monitoring processes. Strong understanding of security auditing principles, risk management practices, and regulatory compliance requirements. Experience supporting audits and responding to auditor requests. Knowledge of security frameworks and control standards. Experience investigating security events, analyzing logs, and identifying threats across enterprise environments. Strong understanding of network security, endpoint security, and cloud security monitoring. T1466873-PHI_1790188133 To Apply for this Job Click Here