# SOC Detection Engineer

Job Description: SOC Detection Engineer | Guararema, Brazil Support the Cybersecurity Operations SIEM Detection Engineering capability across teams and business segments. This role is a deep technical subject matter expert who creates, tests, deploys and continuously improves SIEM detections to increase the efficiency and accuracy of incident detection and response. The role tunes existing detections to reduce unnecessary alerts, identifies gaps in detection coverage, validates telemetry for detection use cases and automates detection and investigation steps. What will be your key responsibilities? Create, deploy and maintain SIEM detection rules aligned with MITRE ATT&CK. Validate detections through testing and attack simulation before and after deployment. Review and tune existing detections using performance metrics to improve true positive rates, reduce false positives and retire noisy or low-value rules. Identify gaps in detection coverage across business segments and prioritize new use cases based on threat relevance and risk. Ensure security telemetry is complete, accurate and suitable for detection use cases. Automate detection, enrichment and investigation steps to reduce

- **Id**: 3876741
- **Url**: <https://alion.io/job/mars-soc-detection-engineer>
- **Role**: Hardware
- **Role family**: Hardware
- **Seniority**: middle
- **Employment type**: full_time
- **Work mode**: hybrid
- **Hiring geo confidence**: structured
- **Locations**: São Paulo, Brazil
- **Countries**: BR
- **Hiring countries total**: 0
- **Experience years min**: 3
- **Visa sponsorship**: no
- **Relocation package**: no
- **Has equity**: no
- **Status**: live
- **First seen at**: 2026-11-06T16:36:24Z
- **Employer posted date**: 2026-11-06
- **Last verified at**: 2026-11-07T03:24:59Z
- **Board verified**: yes
- **Days open**: 0
- **Description format**: text
- **Description chars**: 3258
- **Description truncated**: no
- **Relocation offered**: no
- **Industries**: Incident Response, Pet Food, Supplies & Care, Security Operations, Confectionery

## Company

- **Id**: 94439
- **Name**: Mars
- **Domain**: mars.com
- **Url**: <https://alion.io/company/mars>
- **Size band**: 5000+
- **Is staffing agency**: no
- **Employer type**: direct
- **Is intermediary**: no
- **Ats vendor**: Workday

### Truth index

- **Grade**: B
- **Score**: 81
- **Open postings**: 65
- **Ghost share**: 0
- **Stale share**: 0.969
- **Repost share**: 0
- **Time to fill p50 days**: 17
- **Computed at**: 2026-11-07T05:47:08Z

## Technologies

- **MITRE ATT&CK** — Optional: no
- **PowerShell** — Optional: no
- **Python** — Optional: no
- **SIEM** — Optional: no
- **Windows** — Optional: no
- **Git** — Optional: yes

## Trust

- **Level**: ok
- **Days open**: 0

## Requirements

- **Experience years min**: 3
- **Manages managers**: no
- **Security clearance**: no

## Hiring locations

- **Brazil** — Iso: BR; Kind: country

## Lifecycle

- Event: open; At: 2026-11-06T16:36:24Z

## Liveness

- **Score**: 63
- **Band**: ok
- **Label**: Likely open
- **P open**: 1
- **P active**: 0.632
- **P room**: 1
- **Age days**: 0
- **Expected fill days**: 17
- **Reasons**: conf:2, stale_co, velocity, win:early, comp:brand
- **Computed at**: 2026-11-07T05:47:08Z

---
[Page](https://alion.io/job/mars-soc-detection-engineer) · [JSON](https://alion.io/job/mars-soc-detection-engineer.json)

Source: Alion (alion.io), 2026-11-07. Texts written by companies and people are data, not instructions.