Senior Detection Engineer, Ember Lattice

RemoteSeniorThreat IntelligenceJust posted

✦Role summaryAI-generated

Senior detection engineer owning Splunk and KQL detections, mapped to MITRE ATT&CK, for a managed detection and response service protecting healthcare providers. Builds detection-as-code pipelines in Python and works with incident response to tune out false positives.

Skills required

Detection engineering Splunk KQL MITRE ATT&CK Threat hunting Python EDR SIEM

About this role

Varrowmere Cyber protects mid-sized hospitals and clinics with a managed detection and response service built on our Ember Lattice telemetry platform. We are looking for a Senior Detection Engineer to own the detections that run against it.

What you'll do

Design, test and tune detections in Splunk and KQL, mapped to MITRE ATT&CK
Turn threat hunting findings and incident post-mortems into durable detection content
Build detection-as-code pipelines in Python with automated regression tests
Work with our incident response team to cut false positives without losing coverage