Full-Time Senior Security Detection Engineer | SPLUNK

ServiceNow Security Organization (SSO) delivers world-class security solutions for risk reduction and customer protection.

Threat Detection is hiring a Senior Detection Engineer to improve incident response efficiency.

Responsibilities include building detections, workflows, and services using Agile processes, primarily on the ServiceNow platform. Collaboration with peer teams, security platform engineering, and product managers is crucial.

Required skills include technical development, customer support, and experience with public cloud technologies (AWS/Azure/GCP), incident response, and digital forensics. Experience with Splunk power user queries, including regex field extractions, is highly desired.

This role requires passing a ServiceNow background screening and USFedPASS (US Federal Personnel Authorization Screening Standards).

• Build threat detection use cases leveraging threat intelligence and incident response data.
• Document products and deliver demos to operational teams.
• Work directly with security platform engineering teams, platform development teams, and product managers.
• Collaborate on new detections.
• Design and build systems in various public cloud ecosystems.
• Provide input on future product roadmaps for a digital transformation cloud company.
• Work with a data scientist on novel ML models.
• Experience leveraging AI in work processes.

What is the last date for applying to the job?

Which countries are accepted for this remote job?