Cyber Defense Detection Engineer, Mandiant, Google Cloud
Ohio, USA +1 · Full-time · Posted Oct 15, 2026
- Location
- Ohio, USA
United States - Experience
- 3 years of detection tuning and creation; no alternatives stated.
- Education
- Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related technical field, or equivalent practical experience.
About the job
Improves customer cyber defense by creating and tuning security detections, advising on SOC technologies, and helping resolve security issues.
What you'll do
- Assess customer Cyber Defense Centers and plan and oversee improvements.
- Create and modify SIEM use cases and detection logic using threat intelligence and query languages or Sigma.
- Improve alert fidelity, support incident response, and collaborate with client stakeholders to resolve security issues.
What they ask for
- Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related technical field, or equivalent practical experience.
- 3 years of experience creating and tuning detections with security tools such as SIEM, EDR, or NDR.
- Experience engineering content inside SIEM platforms, such as rule creation and advanced correlation searching.
- Experience with scripting languages such as PowerShell and Python; ability to travel up to 20%.
Nice to have
- Experience with SPL, KQL, YARA-L, or similar SIEM query languages and SIEM log flow, aggregation, and forwarding.
- Ability to collaborate with client stakeholders and develop executive client relationships.
Pay
$112000 - $161000 (USD) base salary
Tools
SIEM, EDR, NDR, PowerShell, Python, SPL, KQL, YARA-L
Model-written summary · the original posting is authoritative