Detection Engineer – SIEM/SOAR

Dragonfli Group

. Build automation, AI-driven (“Super Intelligence”/SI), and integration workflows that improve detection and response .

Posted 10/23/2026full-timeRemote • United StatesSeniorLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in building and optimizing AI-driven security detection workflows, integrating SIEM and SOAR technologies, and translating operational security needs into effective technical solutions. Proficient in analyzing security telemetry and implementing enhancements to improve detection capabilities.

Highest-signal resume keywords

Detection EngineeringSIEM IntegrationSecurity AutomationPython ProficiencyCompTIA Security+

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Detection EngineeringSecurity OperationsAutomation WorkflowsTechnical DocumentationSecurity Telemetry AnalysisIncident ResponseAPI IntegrationMalware AnalysisDigital ForensicsMachine Learning Security Detection

Soft Skills

Continuous ImprovementCollaborationAnalytical ThinkingProblem Solving

Tools & Technologies

Splunk Enterprise SecuritySplunk SOARSentinelOneEDR PlatformsCloud PlatformsSOAR Platforms

Certifications & Qualifications

CompTIA Security+GCIAGCIHCompTIA CySA+CISSP

Industry Keywords

NIST SP 800-53CIS ControlsMITRE ATT&CKFISMAFedRAMPISO 27001ISO 27002NICE FrameworkFederal Cybersecurity DirectivesPrivacy Act

Tech Stack

Tools & technologies

CloudCyber SecurityLinuxPythonSplunkUnix

About the role

Key responsibilities & impact

Build automation, AI-driven (“Super Intelligence”/SI), and integration workflows that improve detection and response
Integrate and optimize SIEM, EDR, SOAR, and threat intelligence technologies into a cohesive detection architecture
Analyze requirements and translate operational security needs into technical specifications and implementable solutions
Test, evaluate, and validate detections and automation workflows
Drive continuous improvement based on testing results and operational feedback
Analyze security telemetry to identify anomalies, trends, and detection gaps
Recommend and implement detection enhancements
Create and maintain technical documentation, SOPs, and runbooks
Work with SOC, threat intelligence, and incident response teams
Research and assess emerging security and AI/ML capabilities
Design, implement, and maintain automated and AI-driven security detection and integration capabilities across enterprise security monitoring technologies

Requirements

What you’ll need

8+ years of relevant cybersecurity experience in detection engineering, security operations, or a closely related field
3-8+ years of relevant cybersecurity experience in detection engineering, SOC operations, or security automation (inferred; see Recruiter Notes)
Bachelor's degree in a relevant field, or four additional years of relevant experience in lieu of a degree
U.S. Citizenship or Permanent Residency
All work performed within the continental U.S.
CompTIA Security+ (or equivalent baseline certification)
One of: GCIA, GCIH, or CompTIA CySA+
Programming/scripting certification or demonstrated proficiency in Python, PowerShell, or similar
Hands-on experience with SIEM and SOAR platforms, such as Splunk Enterprise Security, Splunk SOAR, SentinelOne, and SentinelOne Hyperautomation
Working knowledge of detection engineering methodologies, SOC operations, and incident response
Working knowledge of NIST SP 800-53, CIS Controls, and the MITRE ATT&CK framework
Experience building and maintaining technical documentation, SOPs, and runbooks
Security platform skills including SIEM, EDR, SOAR, API integration, and cloud platforms
Knowledge of Windows, Linux, and Unix operating systems
Preferred: CISSP or GSEC; CompTIA SecAI+; GMON or similar certification; prior federal contracting experience; familiarity with NICE Framework, ISO 27001/27002, FISMA, FedRAMP, OMB circulars, federal cybersecurity directives, and Privacy Act; malware analysis, digital forensics, risk assessment, and machine learning/AI security detection experience

Benefits

Comp & perks

Medical — Multiple POS health plan options including an HSA-compatible plan
Dental — PPO coverage for preventive, basic, and major services
Vision — Annual exam, frames, lenses, and contact lens allowance
401(k) — Employer match up to 5% of eligible compensation
Long-Term Disability — 100% employer-paid coverage at 50% of pre-disability earnings
Life Insurance & AD&D — 100% employer-paid coverage valued at $10,000 each
PTO — 15–25 days annually based on tenure
Paid Federal Holidays — All 11 federal holidays observed