Jobiglo

No results.

Senior Detection Engineer (SOC)

AspenView Technology Partners · Région métropolitaine de Buenos Aires

New
Onsite Senior 🇬🇧 English
Elastic Security EQL ES|QL KQL Splunk SPL Sentinel Chronicle Abstract Security Cribl Logstash CrowdStrike Falcon Microsoft Defender Okta System Log AWS CloudTrail GuardDuty Git Python PowerShell MITRE ATT&CK Sigma YARA Atomic Red Team Caldera SOAR

Job description

About the role

The Senior Detection Engineer will design, build, test and tune security detections for a 24/7 SOC serving a large US consumer lender. Working on‑site in Bogotá or Buenos Aires, you will handle telemetry from multiple sources and deliver alerts through Elastic.

Key responsibilities

  • Own detection use cases end‑to‑end: research, logic, testing, documentation, release and client approval.
  • Build correlation and multi‑stage detections across endpoint, identity, network, email and cloud telemetry.
  • Create custom IOAs in CrowdStrike, detections in Microsoft Defender, identity detections on Okta and AWS control‑plane coverage.
  • Tune noisy rules, document changes and maintain false‑positive rates.
  • Fix parsers and data‑quality issues in the data pipeline.
  • Peer‑review rules, turn hunt findings into backlog items and support major incidents.

Required profile

  • Several years of experience writing, testing and tuning detections in production on a SIEM or analytics platform.
  • Deep query skills in at least one detection language and ability to learn others quickly.
  • Understanding of attack visibility across endpoint, identity and cloud telemetry mapped to MITRE ATT&CK.
  • Strong English communication (B2+) to defend rule logic to US‑based leads and clients.
  • Autonomous, evidence‑driven mindset treating detections as code with Git, peer review and change control.
  • Availability to work on‑site during US Eastern business hours.

Required skills

  • Elastic Security (EQL, ES|QL, KQL)
  • Splunk (SPL), Sentinel, Chronicle
  • Abstract Security, Cribl, Logstash
  • CrowdStrike Falcon, Microsoft Defender, Okta System Log, AWS CloudTrail, GuardDuty
  • Git, Python, PowerShell
  • MITRE ATT&CK framework
  • Bonus: Sigma, YARA, Atomic Red Team, Caldera, SOAR playbooks

What we offer

  • Competitive base salary
  • Flexible work model: hybrid, remote or in‑office
  • Real growth opportunities and leadership visibility
  • Inclusive, respectful culture blending US innovation with Colombian heart
  • Company that listens, invests in you and celebrates wins together

Questions fréquentes

Le salaire n'est pas communiqué publiquement par le recruteur. Vous pouvez postuler et négocier directement avec AspenView Technology Partners.
Cliquez sur "Postuler maintenant" en haut de la page. Vous pouvez importer votre CV en 1 clic — Jobiglo extrait automatiquement vos informations et postule pour vous.

Why are you reporting this job?

Thank you for your report. We will review this job.

Apply in 30 seconds

Enter your email to apply. An account will be created automatically.

Apply now →

By continuing, you accept our terms of use.

Already have an account? Login

A question about this job?

Ask it here: you will get the full job summary by e-mail, right away.

💬 Chat with us on Telegram

Published 2 hours ago

Expires 1 month from now

2 views · 0 interested

Boost your chances

Upload your CV — we will match you with relevant openings.

Analyzing your CV...

AspenView Technology Partners

Région métropolitaine de Buenos Aires