Requirements

• Experience in detection engineering, security engineering, or software development with a focus on cybersecurity
• Experience developing detections and integrations within SIEM platforms (e.g., Splunk, Elastic, QRadar), use of Risk-based alerting
• Skills in Python and JavaScript, with familiarity in NodeJS and Kubernetes environments
• Familiarity with cybersecurity frameworks (e.g., MITRE ATT&CK, Cyber Kill Chain, NIST CSF)
• Experience with cloud security platforms (e.g., Wiz) and integrating their outputs into detection pipelines
• Background in AI/ML or data science applied to cybersecurity detections
• Understanding of cloud-native architectures, container security, and host-based detection
• Experience leading proof-of-concepts or greenfield development plans in a complex security ecosystem

What You'll Be Doing

• Design and operationalize advanced detections across cloud, container, and on-prem environments
• Build integrations for diverse data sources (e.g., Wiz, host telemetry, network sensors) into EA's detection infrastructure
• Define detection lifecycle processes, governance, and performance metrics
• Lead development of AI-driven detection proof-of-concepts
• Guide peers in building scalable, maintainable detection infrastructure and tuning detection content
• Support priorities like product detection assessments, threat-led risk prioritization, and production telemetry uplift