Cybersecurity Detection Engineer

Beacon Hill Staffing Group, LLC

Philadelphia, PA, United States

15 days ago

Role details

Contract type

Permanent contract

Employment type

Full-time (> 32 hours)

Experience level

Expert

Experience required

5 years minimum

Compensation

$160,000.0 - $200,000.0

Working hours

Regular working hours

Job source

bhsg.com

Tech stack

Cloud Computing Security Cyber Security Intrusion Detection and Prevention Python (Programming Language) Network Security Windows PowerShell Security Information and Event Management Scripting QRadar Microsoft Sentinel Splunk

Job description

Design, implement, and maintain threat detection and monitoring capabilities across enterprise environments.
Develop, tune, and optimize SIEM use cases, detection rules, alerts, and correlation logic to identify potential security threats.
Conduct proactive threat hunting, security investigations, and event analysis to identify suspicious activity and emerging risks.
Partner with Security Operations, Incident Response, Infrastructure, and Cloud teams to improve detection coverage and response effectiveness.
Support internal and external audits by providing evidence, documentation, and responses to audit requests.
Evaluate security controls and recommend enhancements to improve compliance, risk reduction, and operational effectiveness.
Assess and align security monitoring practices to regulatory requirements, industry standards, and security frameworks.
Analyze security logs and telemetry from network, endpoint, cloud, and application environments.
Develop metrics, dashboards, and reporting to measure detection effectiveness and compliance readiness.
Automate security monitoring, investigation, and reporting processes through scripting and workflow improvements.
Participate in incident investigations, root cause analysis, and continuous improvement initiatives.
Maintain documentation of security controls, monitoring processes, detection logic, and audit artifacts.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or a related field.
5+ years of cybersecurity experience in threat detection, security engineering, security operations, incident response, compliance, audit, or related disciplines.
Hands-on experience with SIEM platforms such as Microsoft Sentinel, Splunk Enterprise Security, QRadar, or Elastic Security.
Experience developing and maintaining detection rules, alerting strategies, and security monitoring processes.
Strong understanding of security auditing principles, risk management practices, and regulatory compliance requirements.
Experience supporting audits and responding to auditor requests.
Knowledge of security frameworks and control standards.
Experience investigating security events, analyzing logs, and identifying threats across enterprise environments.
Strong understanding of network security, endpoint security, and cloud security monitoring.
Proficiency with PowerShell, Python, or other scripting languages.