{"id":2567459,"url":"https://alion.io/job/aspen-view-tech-detection-engineering","title":"Detection Engineering","company":{"id":4431613,"name":"Aspen View Tech","domain":"aspenviewtech.com","url":"https://alion.io/company/aspen-view-tech","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Buenos Aires, Argentina"],"countries":["AR"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":37000,"max_usd":108000,"period":"year","method":null,"sample_n":4941},"experience_years_min":null,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Crowdstrike","optional":false},{"name":"Elastic SIEM","optional":false},{"name":"Git","optional":false},{"name":"Logstash","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Okta","optional":false},{"name":"PCI DSS","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Red Teaming","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"YARA","optional":false},{"name":"YARA","optional":false}],"status":"live","first_seen_at":"2026-10-05T21:08:07Z","employer_posted_date":"2026-10-06","last_verified_at":"2026-10-15T10:25:00Z","board_verified":true,"closed_at":null,"days_open":9,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":9},"description":"Build the Future with AspenView Technology Partners\nAt AspenView, we are passionate about transforming the way organizations approach technology. We specialize in creating high-performing, nearshore IT teams to help North American clients innovate faster and more efficiently.\nAs we continue to grow, we’re looking for exceptional people to join our team and help drive impactful change across industries.\nWhy Join AspenView?\nAt AspenView, we’re more than a nearshore IT partner-we’re a people-first, purpose-driven company that believes great culture drives great outcomes. We’re passionate about connecting talent and technology to deliver measurable value for clients-and meaningful career paths for our people.\nHere’s what you can expect:\nCompetitive base\nFlexible work model: hybrid, remote, or in-office\nReal growth opportunities and leadership visibility\nInclusive, respectful culture that blends U.S. innovation with Colombian heart\nA company that listens, invests in you, and celebrates wins together\nThe Senior Detection Engineer is a hands-on professional responsible for designing, building, testing and tuning the detections that decide which security events become alerts for a 24/7 SOC serving a large US consumer lender. Working on-site from AspenView's secure delivery suites in Bogotá or Buenos Aires, you will work across telemetry from CrowdStrike, Microsoft Defender, Okta, Palo Alto, Proofpoint and AWS flowing through Abstract Security into Elastic. You will be one of two senior detection engineers on the service, reporting to a US-based Detection Engineering Lead you speak with daily. This role calls for real autonomy: you will be expected to take a use case from idea to production without being walked through it.\nWhat you will do:\nDetection Development\nOwn detection use cases end to end, from threat research and logic to testing against simulated attacks, documentation and release, with client approval for changes that affect alerting.\nBuild correlation and multi-stage detections across endpoint, identity, network, email and cloud telemetry, designed around the attack chains a consumer lender actually sees.\nCreate custom IOAs in CrowdStrike, custom detections in Microsoft Defender, identity detections on Okta, and AWS control-plane coverage.\nTuning & Data Quality\nTune the noisiest and weakest rules with evidence, documenting what changed, the effect on the false-positive rate, and proof the rule still catches what it should.\nFix parsers and data-quality issues when a source routed through Abstract arrives in Elastic incomplete or mis-mapped.\nCollaboration & Continuous Improvement\nPeer review rules with your fellow detection engineer and turn hunt findings and Tier 2 feedback into backlog items.\nWork alongside the threat hunters on the same floor, turning good hunts into production detections.\nSupport major incidents when needed by writing emergency detections or sweeping for related activity.\nTools & Technologies:\n SIEM & Detection: Elastic Security (EQL, ES|QL, KQL); Splunk (SPL), Sentinel or Chronicle also relevant.\nData Pipeline: Abstract Security, or equivalents such as Cribl or Logstash.\nEndpoint, Identity & Cloud: CrowdStrike Falcon, Microsoft Defender, Okta System Log, AWS CloudTrail and GuardDuty.\nEngineering: Git, Python or PowerShell, and MITRE ATT&CK.\n Testing & Automation (Bonus): Sigma, YARA, Atomic Red Team, Caldera and SOAR playbooks.\nWhat you bring:\nExperience: Several years writing, testing and tuning detections in production on a SIEM or analytics platform, with rules you can explain and defend. Deep query skills in at least one detection language and the ability to pick up another quickly.\nTechnical Depth: Understanding of how attacks show up across endpoint, identity and cloud telemetry, mapped to MITRE ATT&CK, plus working knowledge of log pipelines and where data goes missing between source and alert.\nCommunication: English at B2 or above, strong enough to defend a rule's logic to a US-based lead and the client's security team.\nMindset: Autonomous and evidence-driven. You treat detections as code, with Git, peer review and testing before release, and you follow security rules and change control consistently.\nAvailability: On-site work in Bogotá or Buenos Aires during US Eastern business hours, with no shift rotation. Access requires identity, criminal background, employment and education checks, repeated periodically.\n Bonus Qualifications: Hands-on Elastic Security (the most valuable extra on this stack); Abstract Security, Cribl or Logstash; CrowdStrike custom IOAs and Defender advanced hunting; financial services experience under SOX or PCI DSS; a background in incident response or threat hunting; and GCDA, GCIA, GCED, SC-200 or Elastic certifications.\nVisa Sponsorship\nAspenView does not sponsor employment visas for this role. Applicants must be permanently authorized to work in their country of residence and must not require visa sponsorship now or in the future.\nEqual Opportunity Employer\nAspenView is proud to be an equal opportunity employer. We believe in creating an environment where all employees feel welcome, valued, and empowered to succeed. We celebrate diversity and strive to build a culture of inclusion where all individuals, regardless of their race, color, gender, gender identity or expression, sexual orientation, disability, age, or any other characteristic, can thrive. We encourage applicants from all walks of life to join our team and make a lasting impact.","description_format":"text","description_chars":5501,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Upper-Intermediate (B2)","optional":false}]},"benefits":["Flexible schedule","Growth opportunities"],"hiring_locations":[{"name":"Argentina","iso":"AR","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-10-14T22:14:01Z"}],"visa":[],"liveness":{"score":72,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.759,"p_room":0.945,"age_days":9,"expected_fill_days":21,"reasons":["conf:3","win:mid"],"computed_at":"2026-10-15T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/aspen-view-tech-detection-engineering","json_url":"https://alion.io/job/aspen-view-tech-detection-engineering.json","meta":{"generated_at":"2026-10-15T13:00:42Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":20007,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4431613},"rest":"https://alion.io/mcp/rest/get_company?id=4431613"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Faspen-view-tech-detection-engineering"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Faspen-view-tech-detection-engineering"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Faspen-view-tech-detection-engineering"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/aspen-view-tech-detection-engineering\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Faspen-view-tech-detection-engineering"}]}