{"id":2585496,"url":"https://alion.io/job/george-bernard-senior-detection-engineer","title":"Senior Detection Engineer","company":{"id":4423584,"name":"George Bernard","domain":"georgebernard.co","url":"https://alion.io/company/georgebernard","size_band":"1001-5000","is_staffing_agency":true,"employer_type":"agency","is_intermediary":false,"listed_via":null,"ats_vendor":"Manatal","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Colombo, Sri Lanka"],"countries":["LK"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":33000,"max_usd":76000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2094},"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"Git","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"SQL","optional":false},{"name":"YARA","optional":true},{"name":"YARA","optional":true}],"status":"live","first_seen_at":"2026-10-15T03:42:37Z","employer_posted_date":"2026-10-15","last_verified_at":"2026-10-15T19:28:18Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Des ign, develop, and maintain security detections across SIEM, XDR, cloud, endpoint, and identity platforms.\nBuild high-fidelity detection rules mapped to frameworks such as MITRE ATT&CK and other threat models.\nDevelop and manage detection-as-code processes, including testing, version control, and automated deployments.\nAnalyze security telemetry from multiple sources and create correlation rules to identify sophisticated attack patterns.\nContinuously tune and optimize detection logic to improve alert quality and reduce false positives.\nResearch emerging threats, attacker techniques, and malware trends, and translate them into effective detection content.\nConduct detection gap assessments and recommend improvements to increase security coverage.\nCollaborate with SOC, Incident Response, Threat Hunting, and Threat Intelligence teams to enhance detection capabilities.\nSupport post-incident reviews and implement detection improvements based on lessons learned.\nValidate data quality, log sources, and telemetry availability required for effective threat detection.\nDevelop dashboards, reports, and metrics to measure detection effectiveness, coverage, and performance.\nContribute to automation initiatives that improve detection engineering and response workflows.\nMentor junior team members and promote detection engineering best practices.\nRequirements\nBachelor's Degree in Cyber Security, Information Technology, Computer Science, or a related field.\n7+ years of experience in Detection Engineering, Threat Hunting, Incident\nResponse, SOC Engineering, or related cyber security roles.\nHands-on experience with SIEM and XDR platforms such as Splunk, Microsoft Sentinel, Elastic, Stellar Cyber, or similar.\nStrong understanding of cyber threats, attack techniques, adversary behavior, and malware analysis.\nExperience developing detection rules using technologies such as KQL, Sigma, SPL, or equivalent query languages.\nStrong scripting skills in Python, PowerShell, or similar languages.\nExperience working with large log datasets and performing investigations using SQL or similar query languages.\nKnowledge of cloud security concepts across AWS, Azure, or GCP environments\nExperience with Git, CI/CD pipelines, and Detection-as-Code methodologies.\nStrong analytical, troubleshooting, and problem-solving skills.\nExcellent communication and stakeholder management abilities.\nPreferred Qualifications\nExperience with SOAR platforms and automated response workflows.\nExperience with cloud-native threat detection and monitoring.\nHands-on threat hunting experience.\nFamiliarity with detection coverage mapping and security metrics.\nIndustry certifications such as GCIH, GCFA, GCIA, CISSP, or Offensive Security certifications.\nContributions to open-source detection content such as Sigma, YARA, or community detection repositories.","description_format":"text","description_chars":2843,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response"],"lifecycle":[{"event":"open","at":"2026-10-15T03:42:37Z"}],"visa":[],"liveness":{"score":52,"band":"ok","label":"Likely open","p_open":1,"p_active":0.516,"p_room":1,"age_days":0,"expected_fill_days":28,"reasons":["conf:2","agency","win:early","comp:brand"],"computed_at":"2026-10-15T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/george-bernard-senior-detection-engineer","json_url":"https://alion.io/job/george-bernard-senior-detection-engineer.json","meta":{"generated_at":"2026-10-15T20:18:42Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":30860,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4423584},"rest":"https://alion.io/mcp/rest/get_company?id=4423584"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fgeorge-bernard-senior-detection-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fgeorge-bernard-senior-detection-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fgeorge-bernard-senior-detection-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/george-bernard-senior-detection-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fgeorge-bernard-senior-detection-engineer"}]}