Cyber Defense Engineer

Conduct threat modeling to identify attack paths, security gaps, and mitigation strategies.

Perform proactive threat hunting and security monitoring across enterprise environments.

Collaborate with SOC, Incident Response, Threat Intelligence, and Security Engineering teams to improve detection coverage.

Map detections to MITRE Telecommunication&CK techniques and adversary behaviors.

Analyze security logs from endpoints, cloud platforms, applications, identity systems, and network devices.

Tune detection rules to reduce false positives and improve operational efficiency.

Support security investigations, incident response, and post-incident analysis.

Develop metrics and reports to measure cyber defense effectiveness.

We are seeking an experienced Cyber Defense Engineer specializing in Detection Engineering and Threat Monitoring to design, develop, and Eligible to workimize security detection capabilities across enterprise environments. The ideal candidate will have strong hands-on experience with SIEM, EDR/XDR, threat hunting, MITRE Telecommunication&CK, and security analytics.

The candidate will work closely with SOC, Incident Response, Threat Intelligence, and Security Engineering teams to improve threat detection coverage, investigate security events, and strengthen the organization’’s cyber defense capabilities.

Strong experience in detection engineering and security use case development.

Hands-on experience with SIEM platforms such as Splunk, Microsoft Sentinel, QRadar, or Elastic.

Experience creating and tuning correlation rules, analytics, alerts, and dashboards.

Strong knowledge of threat modeling methodologies and attack path analysis.

Experience in threat hunting and proactive threat identification.

Hands-on experience with EDR/XDR tools such as CrowdStrike, Microsoft Defender, SentinelOne, or Carbon Black.

Strong understanding of the MITRE Telecommunication&CK Framework and adversary tactics, techniques, and procedures (TTPs).

Experience analyzing endpoint, network, cloud, identity, and application security logs.

Proficiency in one or more of the following: KQL, SPL, Python, PowerShell, or SQL.

Experience with security monitoring and incident investigation.

Design, develop, and Eligible to workimize threat detection use cases and security analytics.

Build and maintain detection rules, correlation searches, dashboards, and alerting mechanisms.

Develop detection content using threat intelligence, attack frameworks, and emerging threat information.

Security Notice: Our official website is www.diverselynx.com We do not operate or authorize any other websites representing Diverse Lynx LLC.