{"id":2623102,"url":"https://alion.io/job/saic-senior-detection-engineer","title":"Senior Detection Engineer","company":{"id":58788,"name":"SAIC","domain":"saic.com","url":"https://alion.io/company/saic","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"B","score":81,"open_postings":54,"ghost_share":0,"stale_share":0.963,"repost_share":0,"time_to_fill_p50_days":15,"computed_at":"2026-10-15T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":{"label":"EST","utc_offset_min":-5,"utc_offset_max":-5},"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":104000,"max_usd":211000,"period":"year","method":"global_role_seniority_cell","sample_n":2094},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false}],"status":"live","first_seen_at":"2026-10-15T13:55:57Z","employer_posted_date":"2026-10-15","last_verified_at":"2026-10-16T01:14:57Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"SAIC has an opening for a Senior Detection Engineer. This position is located in Oak Ridge, Tennessee; however, SAIC is open to remote work for qualified candidates.\nThis role serves as a Senior Technical Analyst within SAIC’s Enterprise Security Operations Center (ESOC) and Detection Engineering Team. Reporting to the Manager of Defensive Cyber Operations (DCO), the Senior Analyst is responsible for enhancing enterprise-wide threat detection capabilities. The Senior Analyst develops high-fidelity detections on an operational cadence across SIEM, EDR, and other security telemetry platforms, ensuring SAIC maintains strong visibility into adversary tactics and emerging threats. In this position, the analyst works closely with the 24/7 Detection and Response, Cyber Incident Response, Cyber Threat Intelligence, Offensive Security Operations, and Sustainment teams to operationalize detections and continuously strengthen the organization’s defensive posture.\nIn addition to advanced threat analysis and detection engineering responsibilities, the Senior Analyst mentors Detection Engineering analysts and collaborates across teams to support capability development, detection tuning, and documentation improvements. This includes contributing to continuous improvement initiatives and participating in cross-team knowledge-sharing activities that align with broader ESOC and DCO operational objectives.\nThe position will work a 4×10 schedule, 07:00 a.m. EST - 5:00 p.m. EST, Monday-Thursday, with the expectation to support 24/7/365 operations when required.\nJob Duties:\nOperationally develop, deploy, and maintain high-fidelity detections across SIEM, EDR, and other security telemetry platforms to support continuous monitoring and response.\nWork closely with the Detection & Response team to validate alerts, refine workflows, and ensure engineered detections align with operational needs and real-world analyst workflows.\nProvide rapid detection-focused support during active incidents, including tuning recommendations, data enrichment, and technical guidance for investigation teams.\nConduct ongoing tuning and optimization to improve detection fidelity, reduce false positives, strengthen efficiency, and close visibility gaps across the enterprise.\nPerform advanced threat and telemetry analysis to confirm detection performance, identify adversary behaviors, and ensure coverage of emerging threats.\nOperationalize Cyber Threat Intelligence (CTI) by translating observed TTPs, indicators, and behavioral patterns into reliable, actionable detections aligned with DCO mission requirements.\nPartner with CTI, Offensive Security Operations (OSO), and Purple-Team operators to validate detection logic through adversary emulation, exercise detection coverage, and refine monitoring gaps identified during testing.\nConvert threat-hunting discoveries, vulnerability insights, and purple-team findings into improved detection logic, analytics, and monitoring enhancements.\nMaintain clear documentation for detection logic, tuning actions, workflows, and operational standards to support consistency and repeatability across the SOC.\nMentor Detection Engineering analysts and support development of Detection & Response personnel to strengthen operational capability and readiness.\nContribute to ESOC/DCO improvement initiatives, including engineering sprints, automation efforts, detection content onboarding, and process refinement.\nLead post-incident detection reviews to identify root-cause gaps, update detection coverage, and improve overall defensive posture.\nEnhance dashboards, analytics, and tooling used across ESOC to support monitoring, triage, and investigative operations.\nSupport the ESOCs 24/7/365 operational needs as required to maintain continuity of coverage during high-priority or elevated-tempo events.\nPerform additional duties and support other operational tasks as assigned to meet mission and organizational needs.\nEducation and Experience Requirements:\nBachelor’s degree and 5+ years related experience, or a Master’s degree and 3+ years of related experience. An additional 4+ years of experience may be considered in lieu of a degree.\nMust have a minimum of 3 years of cybersecurity operations experience working with the enterprise SIEM Splunk.\nMust possess one of the following certifications: CySA+, SSCP, or equivalent\nMust obtain the following certification within six (6) months of hire: Splunk Certified Cybersecurity Defense Engineer.\nRequired Skills:\nAdvanced proficiency in Splunk SPL and Python for security automation and workflow development.\nStrong leadership skills with a proven ability to lead and motivate a team effectively.\nCan-do attitude.\nSelf-motivated and quick learner.\nExcellent verbal and written communication skills.\nAbility to multitask and collaborate to solve complex technical problems.\nDesirables:\nOne or more of the following certifications: ISC2 - CISSP, Splunk Certified Cybersecurity Defense Analyst, Splunk Certified Cybersecurity Defense Engineer.","description_format":"text","description_chars":5027,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Digital Government","Information Security","Systems Integrators","Engineering Services"],"lifecycle":[{"event":"open","at":"2026-10-15T14:11:02Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":15,"reasons":["conf:0","win:early","comp:brand"],"computed_at":"2026-10-16T02:04:35Z"},"pay":null,"html_url":"https://alion.io/job/saic-senior-detection-engineer","json_url":"https://alion.io/job/saic-senior-detection-engineer.json","meta":{"generated_at":"2026-10-16T02:04:35Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3317,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58788},"rest":"https://alion.io/mcp/rest/get_company?id=58788"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsaic-senior-detection-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsaic-senior-detection-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsaic-senior-detection-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/saic-senior-detection-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsaic-senior-detection-engineer"}]}