RemoteLeaf Logo
Log in Sign up

Detection Engineering Lead

22 hours, 52 minutes ago
United States
Full-time
Lead
Security Engineer
Software Development
Generative AI Git Python SIEM Splunk
Apply Now
Aspenview Technology Partners

Aspenview Technology Partners

Aspenview Technology Partners empowers IT organizations by providing agile, expert-staffed nearshore IT teams that deliver scalable capacity and advanced capabilities in software development, data engineering, business intelligence, artificial intellig...

Internet Software & Services
View All Jobs 16

Description

  • Own the detection inventory, including new use cases, tuning, health monitoring, ownership, and retirement.
  • Prioritize detection development using threat intelligence, hunt findings, incidents, and Tier 2 feedback.
  • Build identity, endpoint, cloud, and control-plane detections across Okta, CrowdStrike, Microsoft Defender, and AWS.
  • Troubleshoot telemetry pipelines from source systems through Abstract Security, Elastic, alerting, and ServiceNow cases.
  • Ensure detection data is properly parsed, normalized, and enriched.
  • Manage detection as code using version control, peer review, testing, and approved change records.
  • Produce MITRE ATT&CK coverage reports, including identified gaps, for client security leadership.
  • Lead, mentor, prioritize, and review the work of two senior detection engineers in Latin America.
  • Present detection coverage and limitations to the client’s security leadership.

Requirements

  • Experience writing and tuning production detections on a SIEM or analytics platform.
  • Strong understanding of log pipelines and diagnosing missing data between source systems and alerts.
  • Experience applying detection-as-code practices, including version control, peer review, and pre-release testing.
  • Experience leading or mentoring engineers and reviewing work across distributed teams.
  • Ability to explain detection logic, coverage, limitations, and validation methods to clients.
  • Working knowledge of Elastic Security, including EQL, ES|QL, or KQL; experience with Splunk, Sentinel, or Chronicle is also relevant.
  • Availability to work remotely from the United States during business hours anchored to Eastern Time.
  • Willingness to travel periodically to the client and to Bogotá or Buenos Aires.
  • US work authorization and successful identity, criminal background, employment, and education checks are required; visa sponsorship is not available.
  • Preferred experience includes Abstract Security or Cribl, CrowdStrike custom IOAs, Microsoft Defender advanced hunting, financial-services regulations, GenAI for detection, or certifications such as GCDA, GCIA, GCED, SC-200, or Elastic certifications.

Benefits

  • Competitive base compensation.
  • Flexible hybrid, remote, or in-office work model.
  • Growth opportunities and leadership visibility.
  • Inclusive, respectful, people-first culture.
  • Company investment in employee development and recognition of team achievements.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Loenbro

Identity Architect

Loenbro 251-1K Construction & Engineering

Loenbro’s remote Identity Architect will lead the design and evolution of enterprise identity and access management across the company’s construction and infrastructure operations, with an initial focus on Microsoft Entra ID and modern authentication.

Anywhere Full-time Lead Security Engineer
$185k-$200k
OpenID Connect SAML
23 hours, 22 minutes ago
DataVisor

Security Engineer

DataVisor 51-250 IT Services

DataVisor is seeking a Security Engineer to protect its AWS and GCP environments, products, and AI/LLM integrations through cloud security engineering, threat assessment, monitoring, and compliance practices.

United States Full-time Senior Security Engineer
$120k-$150k
AWS DHCP Encryption FTP GCP Machine Learning OAuth OWASP SIEM TLS
23 hours, 22 minutes ago
Shakepay

ingénieur de sécurité principal

Shakepay 51-250 Diversified Financial Services

Shakepay recherche un ingénieur de sécurité principal pour protéger son infrastructure, ses produits et ses données clients tout en développant ses capacités de sécurité, d’observabilité et d’intelligence artificielle dans un environnement fintech réglementé.

Canada Full-time Lead Security Engineer
$166k-$204k
AWS Bitcoin Git GitHub
1 day, 22 hours ago
Pinterest

Security Software Engineer II, Detection and Response

Pinterest 5K-10K Internet Software & Services

Pinterest is hiring a Security Engineer to strengthen detection and incident response capabilities, protect employees and infrastructure, and adapt security operations to emerging threats in a cloud-first environment.

United States Full-time Mid Level Security Engineer
$124k-$255k
Go Network Security Python Ruby SIEM TCP/IP
1 day, 22 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers