Detection Engineer, Falcon Complete

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Detection Engineer, Falcon Complete based in the United States. As a Detection Engineer, you will play a critical role in developing and maintaining advanced security detections that power large-scale managed detection and response operations. You will join a specialized engineering team focused on identifying emerging cyber threats and transforming threat intelligence into high-quality, actionable detection rules. Working with extensive datasets and diverse third-party security technologies, you will help close detection gaps and strengthen protection against increasingly sophisticated adversaries. You will contribute throughout the detection engineering lifecycle, from threat research and data analysis to rule development, testing, deployment, and automation. You will also leverage artificial intelligence, large language models, and modern development tools to accelerate detection workflows and improve accuracy at scale. This remote opportunity offers the chance to collaborate with experienced security professionals and make a meaningful impact on global cybersecurity operations. Accountabilities: - Conduct threat research and proactive threat hunting to identify emerging adversary tactics, techniques, and procedures (TTPs), translating intelligence findings into effective detection strategies. - Develop, test, deploy, and maintain high-fidelity detection rules for a Next-Generation SIEM platform, supporting advanced managed detection and response capabilities. - Respond rapidly to emerging threats, including zero-day vulnerabilities and newly discovered attack techniques, by creating and improving relevant detection coverage. - Analyze security events and large datasets across multiple third-party technologies and data sources to identify suspicious activity, attack patterns, and detection gaps.

- Perform code reviews, validation, and testing to ensure detection rules meet established quality, accuracy, reliability, and performance standards before large-scale deployment. - Apply Continuous Integration and Continuous Delivery (CI/CD) best practices to manage and deploy detection rules as code. - Contribute to an AI-powered detection engineering ecosystem by leveraging large language models (LLMs), AI coding agents, and intelligent automation tools to accelerate threat research, rule development, and operational workflows. - Collaborate with SIEM architects and engineering teams to establish best practices for data ingestion, parsing, and normalization using common event schemas. - Build, improve, and maintain internal utilities, tools, and automation solutions that help managed security teams operate more efficiently and at scale. - Develop and maintain technical documentation, operational processes, and engineering standards to support consistency and continuous improvement. - Participate in a Detection Engineer on-call rotation, providing technical support and responding to operational requirements when needed. Requirements: - At least 3 years of professional experience as a Detection Engineer, Security Engineer, Security Analyst, Threat Intelligence Analyst, or in a closely related cybersecurity role. - Strong understanding of current cybersecurity threats, adversary behaviors, attack techniques, and methods for detecting malicious activity using SIEM technologies. - Practical experience developing, maintaining, or optimizing security detection rules and analyzing security events. - Experience working with large datasets from multiple vendors, platforms, and security technologies. - Hands-on familiarity with SIEM solutions such as LogScale, Splunk, Sumo Logic, Microsoft Sentinel, IBM QRadar, or LogRhythm.