Senior Detection Engineer (SOC)
AspenView Technology Partners · Région métropolitaine de Buenos Aires
Job description
About the role
The Senior Detection Engineer will design, build, test and tune security detections for a 24/7 SOC serving a large US consumer lender. Working on‑site in Bogotá or Buenos Aires, you will handle telemetry from multiple sources and deliver alerts through Elastic.
Key responsibilities
- Own detection use cases end‑to‑end: research, logic, testing, documentation, release and client approval.
- Build correlation and multi‑stage detections across endpoint, identity, network, email and cloud telemetry.
- Create custom IOAs in CrowdStrike, detections in Microsoft Defender, identity detections on Okta and AWS control‑plane coverage.
- Tune noisy rules, document changes and maintain false‑positive rates.
- Fix parsers and data‑quality issues in the data pipeline.
- Peer‑review rules, turn hunt findings into backlog items and support major incidents.
Required profile
- Several years of experience writing, testing and tuning detections in production on a SIEM or analytics platform.
- Deep query skills in at least one detection language and ability to learn others quickly.
- Understanding of attack visibility across endpoint, identity and cloud telemetry mapped to MITRE ATT&CK.
- Strong English communication (B2+) to defend rule logic to US‑based leads and clients.
- Autonomous, evidence‑driven mindset treating detections as code with Git, peer review and change control.
- Availability to work on‑site during US Eastern business hours.
Required skills
- Elastic Security (EQL, ES|QL, KQL)
- Splunk (SPL), Sentinel, Chronicle
- Abstract Security, Cribl, Logstash
- CrowdStrike Falcon, Microsoft Defender, Okta System Log, AWS CloudTrail, GuardDuty
- Git, Python, PowerShell
- MITRE ATT&CK framework
- Bonus: Sigma, YARA, Atomic Red Team, Caldera, SOAR playbooks
What we offer
- Competitive base salary
- Flexible work model: hybrid, remote or in‑office
- Real growth opportunities and leadership visibility
- Inclusive, respectful culture blending US innovation with Colombian heart
- Company that listens, invests in you and celebrates wins together
Questions fréquentes
Why are you reporting this job?
Explore further
Salaries, guides and searches in Argentina.
Salaries by job title
- Sales Executive IT // Esquema Hibrido - Microcentro / CABA 25
- Project Manager 17
- Líder DevOps AWS // Multinacional de Software Financiero - Híbrido/ Microcentro / CABA 16
- Ayudante de Cocina 16
- Engineering Manager // Software Financiero - Remoto para residentes en Argentina 14
- Analista de Compras 13
- Técnico de Mantenimiento 13
- Asesor Comercial 13
Apply in 30 seconds
Enter your email to apply. An account will be created automatically.
By continuing, you accept our terms of use.
Already have an account? Login
A question about this job?
Ask it here: you will get the full job summary by e-mail, right away.
Published 2 hours ago
Expires 1 month from now
2 views · 0 interested
Boost your chances
Upload your CV — we will match you with relevant openings.
Analyzing your CV...
AspenView Technology Partners
Région métropolitaine de Buenos Aires
Related job offers
-
SAP Security & GRC Consultant
Cognizant Région métropolitaine de Buenos Aires -
Security Engineer, Workspace
Check Point Software Région métropolitaine de Buenos Aires -
Administrador de base de datos Semi Senior
Empresa Confidencial Région métropolitaine de Buenos Aires -
Backend Developer – Python & Data Engineering
Latino Legends Buenos Aires -
Senior Front‑End Engineer (Remote to Onsite in Buenos Aires)
truelogic Buenos Aires