Threat Detection Engineer

Software Guidance & Assistance, Inc., (SGA), is searching for a Detection Engineer for a Contract assignment with one of our premier SaaS clients in San Jose, CA.

Responsibilities :

• Threat Detection Library Development and Maintenance: Design, develop and maintain a comprehensive threat detection library including rules, alerts, and dashboards used to identify and respond to malicious activity.
• Deliver detection instrumentation across a variety of data, tools and technologies including but not limited to endpoint, network, cloud, and identity platforms.
• Develop and scale detection, mitigation, and response automation tooling.
• Collaborate with other security engineers, analysts, threat hunters, threat intelligence, and red team to build effective threat detection capabilities.

Required Skills

• Hands on experience with cyber threat detection engineering, anomaly detection, risk scoring and behavior analytics as it applies to security.
• Proven experience in building detection logic to identify suspicious or malicious behavior.
• Solid understanding of threat intelligence, attacker methodology, and hardware/network forensics.
• Experience with SIEM platforms (Splunk ES preferred).
• Excellent analytical and problem-solving skills with the ability to think critically and under pressure.
• Familiarity with CSIRT/SOC analyst and Incident Response procedures.
• Strong written and verbal communication skills.
• Collaborative outlook and ability to multi-task in a fast paced environment.
• Experience with cloud security platforms (AWS, Azure, Google Cloud Platform).
• Proficiency in Python scripting for automation and data analysis is a plus.
• Experience EDR and/or CSPM is a plus.
• Experience with Detection-as-Code or CI/CD is a plus.
• Experience with Databricks or SQL-like query languages is a plus.
• Experience with Splunk SOAR/Phantom or other SOAR technologies is a plus.
• Experience with Machilne learning, AI, LLMs is a plus.

SGA is a technology and resource solutions provider driven to stand out. We are a women-owned business. Our mission: to solve big IT problems with a more personal, boutique approach. Each year, we match consultants like you to more than 1,000 engagements. When we say let's work better together, we mean it. You'll join a diverse team built on these core values: customer service, employee development, and quality and integrity in everything we do. Be yourself, love what you do and find your passion at work. Please find us at .

SGA is an Equal Opportunity Employer and does not discriminate on the basis of Race, Color, Sex, Sexual Orientation, Gender Identity, Religion, National Origin, Disability, Veteran Status, Age, Marital Status, Pregnancy, Genetic Information, or Other Legally Protected Status. We are committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, and our services, programs, and activities. Please visit our company to request an accommodation or assistance regarding our policy.

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.

Software Guidance & Assistance, Inc., (SGA), is searching for a Detection Engineer for a Contract assignment with one of our premier SaaS clients in San Jose, CA.

Responsibilities :

• Threat Detection Library Development and Maintenance: Design, develop and maintain a comprehensive threat detection library including rules, alerts, and dashboards used to identify and respond to malicious activity.
• Deliver detection instrumentation across a variety of data, tools and technologies including but not limited to endpoint, network, cloud, and identity platforms.
• Develop and scale detection, mitigation, and response automation tooling.
• Collaborate with other security engineers, analysts, threat hunters, threat intelligence, and red team to build effective threat detection capabilities.

Required Skills

• Hands on experience with cyber threat detection engineering, anomaly detection, risk scoring and behavior analytics as it applies to security.
• Proven experience in building detection logic to identify suspicious or malicious behavior.
• Solid understanding of threat intelligence, attacker methodology, and hardware/network forensics.
• Experience with SIEM platforms (Splunk ES preferred).
• Excellent analytical and problem-solving skills with the ability to think critically and under pressure.
• Familiarity with CSIRT/SOC analyst and Incident Response procedures.
• Strong written and verbal communication skills.
• Collaborative outlook and ability to multi-task in a fast paced environment.
• Experience with cloud security platforms (AWS, Azure, Google Cloud Platform).
• Proficiency in Python scripting for automation and data analysis is a plus.
• Experience EDR and/or CSPM is a plus.
• Experience with Detection-as-Code or CI/CD is a plus.
• Experience with Databricks or SQL-like query languages is a plus.
• Experience with Splunk SOAR/Phantom or other SOAR technologies is a plus.
• Experience with Machilne learning, AI, LLMs is a plus.

SGA is a technology and resource solutions provider driven to stand out. We are a women-owned business. Our mission: to solve big IT problems with a more personal, boutique approach. Each year, we match consultants like you to more than 1,000 engagements. When we say let's work better together, we mean it. You'll join a diverse team built on these core values: customer service, employee development, and quality and integrity in everything we do. Be yourself, love what you do and find your passion at work. Please find us at .

SGA is an Equal Opportunity Employer and does not discriminate on the basis of Race, Color, Sex, Sexual Orientation, Gender Identity, Religion, National Origin, Disability, Veteran Status, Age, Marital Status, Pregnancy, Genetic Information, or Other Legally Protected Status. We are committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, and our services, programs, and activities. Please visit our company to request an accommodation or assistance regarding our policy.

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.