> Markdown version of [/jobs/ext/540954-cyber-detection-engineer-ci-polygraph](https://www.wearedevelopers.com/jobs/ext/540954-cyber-detection-engineer-ci-polygraph). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber Detection Engineer (CI Polygraph)

- **Company:** Zachary Piper
- **Location:** Chantilly, VA, United States
- **Experience:** Expert
- **Salary:** $135,000.0 - $150,000.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Computing Platforms, Unix, Network Operating System (NOS), Computer Networks, Databases, Intrusion Detection Systems, Network Monitoring, Reverse Engineering, Security Information and Event Management, Reliability of Systems, Cyber Threat Analysis, Cyber Warfare, Splunk
- **Published:** June 5, 2026
- **Apply:** https://www.clearancejobs.com/jobs/8955666/cyber-detection-engineer-ci-polygraph

## About the Role

· Active TS/SCI CI Polygraph required in order to be considered

· Bachelor's degree from an accredited college in a related discipline and 5+ years of prior relevant experience

· IAT Level II (GSEC, Security+, SSCP, or CCNA-Security) certification required

· Proficient in modern operating systems, including Windows, UNIX, network OS environments, databases, and virtualized computing platforms.

· Experienced with enterprise-grade security tools, such as Security Information and Event Management (SIEM) systems specifically Splunk, Threat Intelligence Platforms (TIPs), and network monitoring solutions.

· Skilled in developing, modifying, and fine-tuning detection mechanisms, including IDS signatures and SIEM correlation rules.

· Knowledgeable in implementing cybersecurity countermeasures and mitigation strategies to reduce risk and enhance system resilience.

## Description

· Support Cyber Operations Squadron (COS) efforts by ensuring timely publication of updated cybersecurity tool signatures, including antivirus and host-based security systems.

· Conduct in-depth threat analysis, including reverse engineering of malware, to uncover critical details such as origin, target, impacted systems, recommended mitigations, and mission risk.

· Develop custom content for Security Information and Event Management (SIEM) tools and create tailored IDS/IPS signatures to counter specific threats.

· Correlate security events and incidents using data from diverse enterprise sources to identify patterns and potential threats.

· Assess the impact of cyber incidents on data and infrastructure, providing detailed evaluations of damage and recovery needs.

· Perform trend analysis and reporting on cyber incidents to identify recurring threats and inform proactive defense strategies.

· Analyze network traffic and system data to detect anomalies and potential security threats.

· Deliver real-time detection, identification, and reporting of cyber intrusions, suspicious activities, and policy violations.

· Create and implement detection rules


## Related Videos

- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Kubernetes and Microservices with Multi-Model Databases](https://www.wearedevelopers.com/videos/382-kubernetes-and-microservices-with-multi-model-databases)
- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [WeAreDevelopers LIVE - Node and Package Security](https://www.wearedevelopers.com/videos/2138-wearedevelopers-live-node-and-package-security)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Fault Tolerance and Consistency at Scale: Harnessing the Power of Distributed SQL Databases](https://www.wearedevelopers.com/videos/1146-fault-tolerance-and-consistency-at-scale-harnessing-the-power-of-distributed-sql-databases)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)
- [Dev Digest 166: Sycophancy, Zip bombs and AI Native Development](https://www.wearedevelopers.com/magazine/585-dev-digest-166-sycophancy-zip-bombs-and-ai-native-development)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [Dev Digest 216: CyberSec + Mythos, Stack Overflow for Agents & DOOM in TTF](https://www.wearedevelopers.com/magazine/728-dev-digest-216-cybersec-mythos-stack-overflow-for-agents-doom-in-ttf)