Cybersecurity Detection Engineer

Company overview

Techpace provides cybersecurity consulting services that help organizations get greater value from their security investments. Its work includes building advanced threat detection approaches, planning incident response, and offering customized advisory services. The company also supports security operations, compliance, and legal advisory needs so organizations can stay aligned with regulatory obligations and maintain a strong security posture.

Role summary

This position is for an L3 SOC Analyst / Cybersecurity Detection Engineer with deep hands-on experience across multiple SIEM and EDR platforms.

Core responsibilities

• Create, test, and refine detections and parsers across different security tools and technologies.
• Continuously validate and improve detection logic to increase accuracy, efficiency, and overall coverage.
• Align detection development with recognized frameworks such as MITRE ATT&CK and Lockheed Martin's Cyber Kill Chain.
• Lower false-positive rates and improve the performance of rules and use cases.
• Keep detection content continuously optimized for both on-premise and cloud service provider environments that support SOC operations.
• Build advanced detection content using multiple data sources and query languages.
• Guide, mentor, and train junior analysts and engineers.

Candidate profile

• At least 5 years of experience in cybersecurity, with a focus on SOC analysis.
• Solid understanding of computer networks and networking fundamentals.
• Strong knowledge of SIEM platforms from both analytical and administrative viewpoints.
• Ability to work with data sources such as Windows, Linux, Active Directory, PAM, IDS/IPS, firewalls, antivirus, EDR, CASB, NAC, application control, and productivity applications.
• Proven background in threat detection, incident response, and security operations.
• Good grasp of security tools and technologies such as SIEM, IDS/IPS, and EDR.
• Experience integrating threat intelligence feeds into detection workflows.
• Strong familiarity with cybersecurity frameworks and standards.
• Solid understanding of network and endpoint security.
• Prior exposure to threat hunting activities.

Preferred certifications

• GIAC Certified Detection Analyst (GCDA).
• Certified Information Systems Security Professional (CISSP).
• GIAC Certified Forensic Analyst (GCFA).
• GIAC Continuous Monitoring Certification (GMON).