Engineer, Cybersecurity Threat Detection

Аналитика рынка

Стек

Откликнуться

Загрузите резюме — мы свяжем вас с работодателем напрямую через нашу базу.

Описание

Job Purpose The ICE Cybersecurity Threat Detection team is responsible for detecting malicious behavior across ICE's global infrastructure quickly and reliably enough to contain it. We build, tune, and maintain the detection content that security operation teams depend on, and hunt proactively for threats that existing controls do not catch, working alongside threat intelligence, incident response, and red team functions to keep coverage grounded in real adversary behavior. Responsibilities Detection Engineering - Design, build, test, and maintain detection content across SIEM, EDR, and NDR platforms, and document the intent, data source, and expected behavior of each detection Detection Tuning and Health - Own false positive rates, alert volume, and rule health for assigned detection areas, including retiring logic that no longer earns its place Detection Coverage - Map detection coverage to the MITRE ATT&CK framework, identify gaps, and propose the telemetry or logic needed to close them Threat Intelligence Integration - Convert threat intelligence reporting into prioritized detection and hunting work, so coverage follows the adversaries and techniques most relevant to the sector rather than whatever arrived most recently Proactive Threat Hunting - Develop and execute focused hunts to discover threats that evade existing controls, and promote successful hunt outcomes into durable production detections Red Team Gap Remediation - Take ownership of detection gaps reported thro

Контакты работодателя (email/phone/telegram) скрыты из публичного превью — отправьте резюме, чтобы мы связали вас напрямую.