INTL India - Detection Engineer

Insight Global is seeking an experienced Detection Engineer to join a client's Cybersecurity team and play a critical role in building and maturing a continuous monitoring and detection program. This individual will serve as the organization's first dedicated Detection Engineer, responsible for establishing the technical foundation of the detection engineering function and driving the development of advanced threat detections across the enterprise.

The ideal candidate will possess deep hands-on experience building and validating detections within Splunk, translating offensive security findings into actionable security controls, and continuously improving visibility across the organization's attack surface. This role will work closely with Red Teams, Penetration Testers, Incident Responders, Security Operations, Engineering teams, and external MSSP partners to ensure detection coverage aligns with real-world threats.
This is a highly strategic and technical position requiring someone who can thrive in ambiguous environments, evaluate detection effectiveness, identify coverage gaps, and implement scalable processes, standards, and governance frameworks to support a growing security program.

Compensation:
$10/hr to $15/hr
Exact compensation may vary based on several factors, including skills, experience, and education.
Benefit packages for this role will start on the 31st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401K retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com.To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.

- 5+ years of experience in Detection Engineering,
- Threat Detection, Security Engineering, or closely related cybersecurity roles.
- Strong hands-on experience developing and maintaining detections within Splunk.
- Deep understanding of MITRE ATT&CK and adversary behaviors.
- Experience building correlation-based detections across multiple telemetry sources.
- Proficiency with Splunk SPL and an understanding of search optimization and detection performance.
- Experience with at least one major EDR platform, including:
- CrowdStrike Falcon
- Microsoft Defender for Endpoint
- SentinelOne
- Equivalent enterprise EDR solutions
- Knowledge of offensive security techniques, attack chains, and common adversary tactics.
- Experience validating detections through purple teaming, atomic testing, red team exercises, or similar methodologies.
- Strong documentation, communication, and stakeholder management skills.
- Ability to work independently in fast-paced environments with limited structure and evolving requirements.

- Experience participating in or leading Purple Team engagements.
- Sigma rule authoring and cross-platform detection translation experience.
- Experience operationalizing threat intelligence into detection requirements.
- Background in risk-based alerting, detection scoring, and alert prioritization.
- Experience with CrowdStrike Falcon detection development.
- Knowledge of MITRE ATLAS and AI/ML attack scenarios.
- Scripting experience with Python for automation, log parsing, or tooling integration.
- Experience creating logging standards, detection standards, or cybersecurity governance documentation.

Benefit packages for this role will start on the 1st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401k retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.