> Markdown version of [/jobs/ext/1793680-sitec-cyber-threat-detection-engineer-macdill-afb](https://www.wearedevelopers.com/jobs/ext/1793680-sitec-cyber-threat-detection-engineer-macdill-afb). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# SITEC - Cyber Threat Detection Engineer - MacDill AFB

- **Company:** Peraton Inc
- **Location:** Tampa, FL, United States
- **Salary:** $80,000.0 - $128,000.0
- **Contract:** Permanent contract
- **Skills:** Adobe Analytics, IMac, Software System Penetration Testing, Cyber Security, Data Integration, Intrusion Detection Systems, Network Architecture, Red Team (Cyber Security), Security Information and Event Management, Computer Networking Systems, Computer Network Operations, In-Plane Switching (IPS), Mitre Att&ck, Cyber Threat Analysis, Information Technology, Purple Team (Cyber Security), Cyber Warfare, Security Orchestration, Automation & Response
- **Published:** July 20, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9042555/sitec-cyber-threat-detection-engineer-macdill-afb

## About the Role

* Min 12 years with HS degree, 10 years with AS/AA degree, 8 years with BS/BA, 6 years with MS/MA
 * DoD 8570 IAT II Certification
 * DoD TS/SCI clearance
 * CSSP Incident Response or CSSP Analyst, * Must be with DoW 8140 compliant under the Work Role Code 531- Cyber Defense Incident Responder - Intermediate level or higher by 1 Oct 26.
 * Strong analytical and problem-solving skills
 * Ability to communicate security issues clearly to both technical and non-technical stakeholders
 * Strong understanding of security technologies used to defend Enterprise networks such as EDR, XDR, IDS, IPS, SIEM and SOAR.

## Description

Peraton requires Cyber Threat DetectionEngineers to support the Special Operation Command Information Technology Enterprise Contract (SITEC) - 3 EOM.

This position is located at MacDill AFB in Florida.

The purpose of the Special Operations Forces Information Technology Enterprise Contract (SITEC) 3 Enterprise Operations and Maintenance (EOM) Task Order (TO) is to provide USSOCOM, its Component Commands, its Theater Special Operations Commands (TSOCs), and its deployed forces with Operations and Maintenance (O&M) services to maintain Network Operations (NetOps); maintain systems and network infrastructure; provide end user and common device support; provide configuration, change, license, and asset management; conduct training, and perform Install, Move, Add, Change (IMACs) services. The responsibilities and tasks associated with each requirement play a pivotal role to USSOCOM, the CIO/J6 organization, and ultimately the end-user who operate around the globe 24x7x365.

The primary objectives of the Cyber Threat Detection Engineer is to develop, implement, and drive continuous improvement of threat detection capabilities and engineering solutions throughout the USSOCOM enterprise. The Cyber Threat Detection Engineer will explore and implement security technologies and methodologies, while also working to modernize existing security infrastructure and processes.

Duties:

 * Lead internal and external Purple Team engagements to validate continuous hardening of networks and enable successful detection and response during real-world cybersecurity incidents and Red Team assessments.
 * Lead integration of data from multiple security tools to detect complex, multi-step attacks with high accuracy.
 * Work with pen testing teams to design and execute realistic attack simulations that test the effectiveness of current detections.
 * Create and maintain comprehensive documentation of threat detection rules, processes, and technologies
 * Tune and optimize threat detection rules to minimize false positives and ensure accurate detection.
 * Regularly update the Sysmon configuration used for endpoint monitoring to reflect evolving threat landscapes, ensuring coverage of new event types and attack techniques aligned with MITRE ATT&CK.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Securing Your Web Application Pipeline From Intruders](https://www.wearedevelopers.com/videos/53-securing-your-web-application-pipeline-from-intruders)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)

## Related Articles

- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)