Requirements
Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field (preferred)Minimum 6-10 years of experience in cybersecurity operations, detection engineering, or SOC environmentsProven experience in developing and managing detection rules within SIEM platforms (e.g., Splunk)In-depth understanding of cybersecurity technologies, threat detection methodologies, and security operationsExcellent communication, interpersonal, and problem-solving skillsFluency in written and spoken EnglishStrong analytical and reporting skillsProficiency in various security tools and technologies, including SIEM (Splunk), SOAR platforms, scripting languages (Python, PowerShell, Bash), and CI/CD pipelines
Description
Envision Employment Solutions is currently looking for a Senior Cybersecurity Engineer (UCF) for one of our partners, a global leader in consulting, digital transformation, technology and engineering services!About:We are seeking an experienced Senior Cybersecurity Engineer (UCF) to join our team and play a key role in strengthening our threat detection capabilities. In this role, you will design, develop, and optimize detection content that enables the Security Operations Center (SOC) to identify and respond to evolving cyber threats. Working closely with Threat Intelligence, Threat Hunting, and SOC teams, you will build and maintain high-quality detection rules, enhance detection coverage, and continuously improve the accuracy and effectiveness of security monitoring across the organization.Responsibilities:Detection Engineering Design, develop, and maintain detection rules, signatures, and playbooks. Build, test, deploy, and optimize detection logic within the Use Case Factory (UCF). Validate detection capabilities against emerging threats and attack techniques. Continuously tune detection content to improve accuracy and reduce false positives. Security Operations Deploy and maintain detection capabilities across the organization's SOC infrastructure. Analyze and correlate security events from multiple data sources. Support the identification and investigation of suspicious or malicious activities. Collaborate with SOC teams to improve detection coverage and operational effectiveness. Documentation & Continuous Improvement Maintain technical documentation for detection rules, processes, and operational procedures. Support continuous improvement initiatives by identifying gaps and recommending enhancements. Stay informed on emerging threats, attacker techniques, and detection best practices.