Specialist, Cyber Detection Engineer

Job Overview Specialist, Cyber Detection Engineer We are building capabilities that enable the organization with innovation, speed, agility, scalability, and efficiency. As a hands‑on technical contributor, you will design and maintain enterprise threat detection capabilities across on‑prem and cloud environments. You will partner closely with other teams to build new detection capabilities that produce actionable and operationally effective alerting. Responsibilities Operationalize security alerting and develop new custom detection capabilities across endpoint, identity, network, cloud, and application domains. Author and maintain detections using SIEM/XDR platforms, ensuring performance, scalability, and precision. Transform threat intelligence, incident learnings, purple‑team results, and hunt findings into new detection content, enhancements, or coverage improvements. Validate detections using realistic attack scenarios, emulation results, historical data, and safe adversary simulations. Identify telemetry gaps and log data quality issues that limit visibility or detection effectiveness, and work with platform and infrastructure teams to remediate. Rapidly develop temporary analytics or scoping queries to support Incident Response efforts during active investigations. Participate in continuous improvement initiatives, metrics and reporting, and lifecycle management processes. Qualifications 3+ years of experience in detection engineering, incident response, threat hunting, or security operations in large enterprise environments. Practical experience working with common Endpoint, Identity, Network, Cloud & SaaS technologies and associated logging. Proven experience developing detection content across multiple telemetry sources. Strong proficiency with at least one major SIEM/XDR ecosystem and advanced query authoring (Splunk SPL, Microsoft KQL, SQL strongly preferred). Solid understanding of adversary tradecraft with practical experience applying MITRE ATT&CK to detection design, validation, and coverage assessment. Ability to reason about attacker behaviors, detection logic trade‑offs, and operational impacts rather than solely relying on static indicators. Experience using common scripting languages (Python, PowerShell) to solve problems, automate tasks, and interact with REST/GraphQL APIs. Strong written and verbal skills, with the ability to communicate effectively with both technical and non‑technical stakeholders. Preferred Qualifications GIAC GDAT, GCDA, GCTD, GCTI, GMON, GCIH, GCFA, GCPY Splunk Power User Microsoft SC-200, AZ‑500 CompTIA Cybersecurity Analyst (CySA+) Benefits Salary range: $96,200.00 to $158,800.00 (may vary based on location, experience, and skills). Yearly bonus potential at every level. Medical, dental, vision, life insurance, and disability insurance. Paid Time Off (PTO), parental and military leave. 401(k) plan with company match (up to 4%) and company‑funded pension plan. Wellness programs: up to $1,600 annual reimbursement for personal wellbeing items. Work/Life resources: support for parenting, housing, senior care, finances, legal matters, education, mental health, and career development. Education benefit to finance college enrollment and accredited certificate programs. Employee Stock Purchase Plan: shares at 85% of the lower of two prices after one year of service. Participation in a discretionary annual incentive program, subject to performance. Equal Opportunity Employer Prudential Financial, Inc. is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, ancestry, sex, sexual orientation, gender identity, disability, marital status, age, veteran status, domestic partner status, medical condition, or any other characteristic protected by law. If you need an accommodation to complete the application process, please email View email address on click.appcast.io . If you are experiencing a technical issue with your application or an assessment, please email View email address on click.appcast.io . #J-18808-Ljbffr