FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in building and shipping durable detections using AI-assisted workflows, with a strong focus on network and host data analysis. Capable of synthesizing threat intelligence and collaborating with researchers to enhance detection engineering.
Highest-signal resume keywords
Durable Detection EngineeringNetwork Traffic AnalysisDevice FingerprintingFalse Positive ManagementExploit Intelligence Synthesis
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Detection DevelopmentAI WorkflowsProtocol AnalysisHost-Based AnalysisScripting AbilityVulnerability ResponseCVE FamiliarityNVD KnowledgeKEV UnderstandingExploit Intelligence Datasets
Soft Skills
Collaborative MindsetDisciplined Approach
Tools & Technologies
SuricataSnortZeekNuclei TemplatesStreaming Systems
Industry Keywords
Threat IntelligenceDetection Quality EvaluationCommand-and-Control TechniquesCovert ChannelsExploitation Artifacts
About the role
Key responsibilities & impact- Design and direct AI-assisted, agentic detection workflows at scale, with human quality oversight
- Author and ship network signatures and detections against internet-scale scan and probe data
- Identify services, versions, and vulnerable hosts
- Build detections against Canary telemetry to distinguish real exploitation from internet noise
- Synthesize exploitation signals into actionable threat intelligence for customers
- Drive feedback loops into probing and collection capabilities
- Identify necessary data collection, unnecessary collection, and coverage gaps
- Evaluate detection quality and tune false-positive and false-negative rates
- Respond rapidly to high-impact vulnerabilities by analyzing, building coverage, and shipping detections
- Collaborate with vulnerability researchers and threat hunters to connect detection engineering with exploit intelligence
Requirements
What you’ll need- 5+ years of experience building and shipping durable detections over network and host data
- Experience scaling detection development and continuous evaluation processes using AI and agentic workflows with humans on the loop
- Track record of researching, engineering, and validating durable detections across network and host telemetry
- Disciplined approach to false positives and false negatives
- Expertise in device fingerprinting and protocol analysis
- Knowledge of attacker command-and-control techniques, covert channels, and exploitation artifacts
- Experience with network traffic analysis
- Background in host-based analysis and DFIR
- Strong programming or scripting ability
- Familiarity with CVE, NVD, KEV, or exploit intelligence datasets
- Response mindset toward newly disclosed vulnerabilities
- Preferred: Experience with Suricata, Snort, Zeek, Nuclei templates, or similar tools
- Preferred: Published detection research, signatures, or open-source detection content
- Preferred: Experience with streaming systems or real-time data processing
- Preferred: Background in high-growth or startup environments
Benefits
Comp & perks- Transparent, collaborative, and supportive culture
- Growth mindset environment
- Equal employment opportunity employer
- Reasonable accommodations for applicants with physical and mental disabilities
- AI-powered Talent Matching tool used in recruitment