Malvern, PA · On-site
Senior AI Threat Detection Engineer Location: Malvern, PA - Primary | Plano, TX - Secondary Option Position W2 We are seeking a Senior AI Threat Detection Engineer to support Security Operations ...
Quick apply
Malvern, PA · On-site
Senior AI Threat Detection Engineer Location: Malvern, PA - Primary | Plano, TX - Secondary Option Position W2 We are seeking a Senior AI Threat Detection Engineer to support Security Operations ...
Malvern, PA · On-site
$112K - $154K/yr
The AI Threat Detection Engineer, Senior Specialist is responsible for developing and implementing AI-driven capabilities that enhance Security Operations Center (SOC) effectiveness. This role ...
Malvern, PA · On-site
$112K - $154K/yr
The AI Threat Detection Engineer, Senior Specialist is responsible for developing and implementing AI-driven capabilities that enhance Security Operations Center (SOC) effectiveness. This role ...
Malvern, PA · On-site
$112K - $154K/yr
The AI Threat Detection Engineer, Senior Specialist is responsible for developing and implementing AI-driven capabilities that enhance Security Operations Center (SOC) effectiveness. This role ...
Malvern, PA · On-site
$112K - $154K/yr
The AI Threat Detection Engineer, Senior Specialist is responsible for developing and implementing AI-driven capabilities that enhance Security Operations Center (SOC) effectiveness. This role ...
Pittsburgh, PA · On-site
$70K - $140K/yr
Conduct detection engineering activities aligned to the MITRE ATT&CK framework and known adversary behaviors. * Analyze threat intelligence, attack techniques, and emerging threats to identify new ...
New
Pittsburgh, PA · On-site
$70K - $140K/yr
Conduct detection engineering activities aligned to the MITRE ATT&CK framework and known adversary behaviors. * Analyze threat intelligence, attack techniques, and emerging threats to identify new ...
New
Conduct detection engineering activities aligned to the MITRE ATT&CK framework and known adversary behaviors. * Analyze threat intelligence, attack techniques, and emerging threats to identify new ...
New
Conduct detection engineering activities aligned to the MITRE ATT&CK framework and known adversary behaviors. * Analyze threat intelligence, attack techniques, and emerging threats to identify new ...
New
This role sits at the intersection of adversary emulation, threat detection engineering, threat hunting, telemetry validation, and purple team operations. The successful candidate will design and ...
New
This role sits at the intersection of adversary emulation, threat detection engineering, threat hunting, telemetry validation, and purple team operations. The successful candidate will design and ...
New
This role sits at the intersection of adversary emulation, threat detection engineering, threat hunting, telemetry validation, and purple team operations. The successful candidate will design and ...
New
This role sits at the intersection of adversary emulation, threat detection engineering, threat hunting, telemetry validation, and purple team operations. The successful candidate will design and ...
New
Philadelphia, PA · On-site
$115K - $158K/yr
This role sits at the intersection of adversary emulation, threat detection engineering, threat hunting, telemetry validation, and purple team operations. The successful candidate will design and ...
New
Philadelphia, PA · On-site
$115K - $158K/yr
This role sits at the intersection of adversary emulation, threat detection engineering, threat hunting, telemetry validation, and purple team operations. The successful candidate will design and ...
New
Pittsburgh, PA · On-site
Mean Time to Detect (MTTD) * Mean Time to Respond/Resolve (MTTR) * Alert fidelity and false ... Collaborate with Detection Engineers, Incident Responders, and SOC Analysts to understand ...
New
Pittsburgh, PA · On-site
Mean Time to Detect (MTTD) * Mean Time to Respond/Resolve (MTTR) * Alert fidelity and false ... Collaborate with Detection Engineers, Incident Responders, and SOC Analysts to understand ...
New
You will work closely with Threat Intelligence, Incident Response, Detection Engineering, Threat Hunting, Vulnerability Management, and Security Operations teams to develop scalable solutions that ...
You will work closely with Threat Intelligence, Incident Response, Detection Engineering, Threat Hunting, Vulnerability Management, and Security Operations teams to develop scalable solutions that ...
York, PA · Hybrid
$112K - $154K/yr
Engineering preventive and detective controls using automation and infrastructure-as-code (guardrails, baselines, continuous configuration enforcement). * Coordinating with platform and application ...
York, PA · Hybrid
$112K - $154K/yr
Engineering preventive and detective controls using automation and infrastructure-as-code (guardrails, baselines, continuous configuration enforcement). * Coordinating with platform and application ...
Hands-on experience withAnvilogicand Croglor similar SIEM detection engineering platformsfor ... detection engineering, SIEM use case development, alert workflow support, and threat detection ...
Hands-on experience withAnvilogicand Croglor similar SIEM detection engineering platformsfor ... detection engineering, SIEM use case development, alert workflow support, and threat detection ...
Detection Engineering * Security Engineering * SOAR / automation platforms * Drive operational maturity aligned to NIST CSF domains (Detect, Respond, Recover) * Maintain executive-ready visibility ...
Detection Engineering * Security Engineering * SOAR / automation platforms * Drive operational maturity aligned to NIST CSF domains (Detect, Respond, Recover) * Maintain executive-ready visibility ...
Detection Engineering * Security Engineering * SOAR / automation platforms * Drive operational maturity aligned to NIST CSF domains (Detect, Respond, Recover) * Maintain executive-ready visibility ...
Detection Engineering * Security Engineering * SOAR / automation platforms * Drive operational maturity aligned to NIST CSF domains (Detect, Respond, Recover) * Maintain executive-ready visibility ...
Detection Engineering * Security Engineering * SOAR / automation platforms * Drive operational maturity aligned to NIST CSF domains (Detect, Respond, Recover) * Maintain executive-ready visibility ...
Detection Engineering * Security Engineering * SOAR / automation platforms * Drive operational maturity aligned to NIST CSF domains (Detect, Respond, Recover) * Maintain executive-ready visibility ...
Malvern, PA · On-site
CSOC & Detection Engineering Collaboration: Serve as the primary liaison between OSFT, CSOC, Threat Detection Engineering, Fraud Detection, and Cyber Threat Intelligence teams. Coordinate ...
Malvern, PA · On-site
CSOC & Detection Engineering Collaboration: Serve as the primary liaison between OSFT, CSOC, Threat Detection Engineering, Fraud Detection, and Cyber Threat Intelligence teams. Coordinate ...
Malvern, PA · On-site
CSOC & Detection Engineering Collaboration: Serve as the primary liaison between OSFT, CSOC, Threat Detection Engineering, Fraud Detection, and Cyber Threat Intelligence teams. Coordinate ...
Malvern, PA · On-site
CSOC & Detection Engineering Collaboration: Serve as the primary liaison between OSFT, CSOC, Threat Detection Engineering, Fraud Detection, and Cyber Threat Intelligence teams. Coordinate ...
Philadelphia, PA · On-site
We are seeking a Lead Sales Engineer with deep expertise in cyber defense products, such as defensive cyber operations, malware reverse engineering, detection engineering, or threat hunting, and ...
Philadelphia, PA · On-site
We are seeking a Lead Sales Engineer with deep expertise in cyber defense products, such as defensive cyber operations, malware reverse engineering, detection engineering, or threat hunting, and ...
Philadelphia, PA · On-site
We are seeking a Lead Sales Engineer with deep expertise in cyber defense products, such as defensive cyber operations, malware reverse engineering, detection engineering, or threat hunting, and ...
Philadelphia, PA · On-site
We are seeking a Lead Sales Engineer with deep expertise in cyber defense products, such as defensive cyber operations, malware reverse engineering, detection engineering, or threat hunting, and ...
We are seeking a Lead Sales Engineer with deep expertise in cyber defense products, such as defensive cyber operations, malware reverse engineering, detection engineering, or threat hunting, and ...
We are seeking a Lead Sales Engineer with deep expertise in cyber defense products, such as defensive cyber operations, malware reverse engineering, detection engineering, or threat hunting, and ...
$9.9K - $24.7K
0% of jobs
$24.7K - $39.6K
0% of jobs
$39.6K - $54.4K
0% of jobs
$54.4K - $69.3K
0% of jobs
$69.3K - $84.1K
0% of jobs
$84.1K - $99K
0% of jobs
$99K - $113.8K
22% of jobs
$125.9K is the 25th percentile. Wages below this are outliers.
$113.8K - $128.7K
4% of jobs
The median wage is $141.6K / yr.
$128.7K - $143.5K
28% of jobs
$153.1K is the 75th percentile. Wages above this are outliers.
$143.5K - $158.4K
33% of jobs
$158.4K - $173.2K
13% of jobs
$9.9K
$140.7K
$173.2K
A Detection Engineer is responsible for identifying, analyzing, and mitigating security threats by developing detection rules, monitoring security systems, and responding to potential incidents. They work with security tools like SIEMs, EDRs, and IDS/IPS to detect malicious activity and improve threat detection capabilities. Additionally, they collaborate with security teams to enhance defensive strategies and automate detection processes.
As a Detection Engineer, you can expect to work on designing, implementing, and refining security detection strategies to identify potential threats and vulnerabilities in company systems. Daily responsibilities often include developing detection logic, analyzing security alerts, conducting threat hunting exercises, and collaborating with incident response teams. You may also work closely with other cybersecurity professionals to evaluate the effectiveness of existing security measures and recommend improvements. This dynamic environment offers opportunities to work on complex technical challenges while directly contributing to the organization’s overall security posture.
To thrive as a Detection Engineer, you need strong analytical skills, a solid understanding of cybersecurity principles, and experience with threat detection and response, often supported by a degree in computer science or a related field. Proficiency with security information and event management (SIEM) tools, intrusion detection/prevention systems, and certifications like GIAC or CISSP are commonly required. Attention to detail, proactive problem-solving abilities, and effective communication enhance effectiveness in this role. These skills are crucial as Detection Engineers must accurately identify security threats, collaborate with teams, and minimize potential risks to the organization.
Full-time
Re-posted 10 days ago
Job Title: Senior AI Threat Detection Engineer
Location: Malvern, PA – Primary | Plano, TX – Secondary Option
Position W2
Job Description
We are seeking a Senior AI Threat Detection Engineer to support Security Operations Center modernization initiatives. The ideal candidate will have strong experience in SOC operations, detection engineering, cloud security, automation, and hands-on programming. This role will focus on developing AI-driven security capabilities, improving threat detection, automating SOC workflows, and building secure, scalable solutions using modern engineering practices.
The consultant will work closely with security engineering, SOC, platform, and cross-functional teams to design and implement AI-enabled solutions that improve incident response, reduce manual effort, and strengthen overall security operations.
Key Responsibilities
Lead response efforts for escalated cybersecurity alerts, incidents, and security investigations.
Analyze complex attack patterns in real time and recommend effective mitigation strategies.
Develop, maintain, and enhance detection logic, alerts, rules, policies, and signatures across security platforms.
Support monitoring and detection of cyber threats, vulnerabilities, risks, and threat actor tactics, techniques, and procedures.
Build and enhance AI agents to streamline SOC operations and improve analyst efficiency.
Design and optimize prompts, workflows, and use cases for LLM-based security solutions.
Build APIs, integrations, and automation workflows to support AI-driven threat detection capabilities.
Develop clean, maintainable, production-ready code following engineering best practices.
Implement safeguards, controls, and responsible AI practices for secure AI usage within security operations.
Evaluate emerging AI, GenAI, and automation technologies and recommend improvements for SOC modernization.
Collaborate with SOC, security engineering, cloud, platform, and application teams to deliver scalable AI-enabled solutions.
Support deployment and continuous improvement of AI agents across SOC use cases.
Mentor junior team members and help improve overall technical capability within the team.
Participate in special security projects and support additional responsibilities as needed.
Required Qualifications
4+ years of hands-on programming or scripting experience using Python, Java, Shell, or similar languages.
5+ years of experience working with cloud platforms such as AWS or Microsoft Azure.
4+ years of experience building or supporting automation solutions such as SOAR, GitHub workflows, CI/CD automation, or similar platforms.
4+ years of experience working with security technologies or supporting SOC/security operations.
5+ years of exposure to SIEM platforms, detection engineering, or security monitoring concepts.
Strong understanding of security telemetry, including logs, alerts, endpoint data, network data, and cloud security data.
Experience supporting incident response, threat detection, alert tuning, and security investigation workflows.
Exposure to AI, GenAI, LLM-based solutions, or AI agent development.
Strong API integration, automation, and workflow development experience.
Ability to work with cross-functional teams and communicate technical findings clearly.
Preferred Skills
Hands-on experience developing AI or GenAI solutions for cybersecurity use cases.
Experience with prompt engineering, AI agents, and LLM-based workflow automation.
Experience with SOAR platforms and security orchestration.
Knowledge of MITRE ATT&CK, threat actor TTPs, and modern detection engineering practices.
Experience with cloud security monitoring, security data pipelines, and scalable automation frameworks.
Strong understanding of responsible AI, security controls, and risk mitigation for AI-based systems.
Ideal Candidate
The ideal candidate is a senior-level security engineer with strong programming, cloud, automation, and SOC experience. They should be comfortable building AI-driven security solutions, working with security telemetry, improving detection workflows, and collaborating with engineering teams to deliver production-ready capabilities.
