📢 Nuevo: recibe las ofertas del día en nuestro Canal WhatsApp
Jobiglo

Sin resultados.

Senior Detection Engineer

AspenView Technology Partners · Bogota

Nuevo
Onsite Senior 🇬🇧 English
Elastic Security EQL ES|QL KQL Splunk Sentinel Chronicle Abstract Security Cribl Logstash CrowdStrike Falcon Microsoft Defender Okta System Log AWS CloudTrail GuardDuty Git Python PowerShell MITRE ATT&CK Sigma YARA Atomic Red Team Caldera SOAR

Descripcion del puesto

About the role

The Senior Detection Engineer will design, build, test and tune security detections for a 24/7 SOC serving a large US consumer lender. Work will be performed on‑site from AspenView’s secure delivery suites in Bogotá, collaborating closely with a US‑based Detection Engineering Lead.

Key responsibilities

  • Own detection use cases end‑to‑end: research, logic, testing, documentation, release and client approval.
  • Build correlation and multi‑stage detections across endpoint, identity, network, email and cloud telemetry.
  • Create custom IOAs in CrowdStrike, detections in Microsoft Defender, identity detections on Okta and AWS control‑plane coverage.
  • Tune noisy rules, fix parsers and resolve data‑quality issues in the Elastic pipeline.
  • Peer‑review rules, turn hunt findings into backlog items and support major incidents with emergency detections.

Required profile

  • Several years of experience writing, testing and tuning detections in production on a SIEM or analytics platform.
  • Deep understanding of attack visibility across endpoint, identity and cloud telemetry mapped to MITRE ATT&CK.
  • Strong English communication (B2+) to defend rule logic to US‑based stakeholders.
  • Autonomous, evidence‑driven mindset treating detections as code with Git, peer review and change control.
  • Willingness to work onsite in Bogotá during US Eastern business hours.

Required skills

  • Elastic Security (EQL, ES|QL, KQL) and/or Splunk, Sentinel, Chronicle.
  • Data pipeline tools: Abstract Security, Cribl, Logstash.
  • Endpoint/identity/cloud platforms: CrowdStrike Falcon, Microsoft Defender, Okta System Log, AWS CloudTrail, GuardDuty.
  • Version control and scripting: Git, Python, PowerShell.
  • Familiarity with Sigma, YARA, Atomic Red Team, Caldera, SOAR playbooks.

What we offer

  • Competitive base salary.
  • Flexible work model: hybrid, remote or in‑office.
  • Real growth opportunities and visibility with leadership.
  • Inclusive, respectful culture blending U.S. innovation with Colombian heart.
  • Company that listens, invests in you and celebrates wins together.

Questions fréquentes

Le salaire n'est pas communiqué publiquement par le recruteur. Vous pouvez postuler et négocier directement avec AspenView Technology Partners.
Cliquez sur "Postuler maintenant" en haut de la page. Vous pouvez importer votre CV en 1 clic — Jobiglo extrait automatiquement vos informations et postule pour vous.

Por que reporta esta oferta?

Gracias por su reporte. Revisaremos esta oferta.

Postula en 30 segundos

Ingresa tu email para postular. Se creara una cuenta automaticamente.

Postular ahora →

Al continuar, aceptas nuestras condiciones de uso.

Ya tienes cuenta? Iniciar sesion

¿Una pregunta sobre esta oferta?

Hágala aquí: recibirá el resumen completo por correo, de inmediato.

💬 Escríbenos en Telegram

Publicado hace 19 horas

Expira en 1 mes

5 vistas · 0 interested

Aumenta tus posibilidades

Sube tu CV: te propondremos las ofertas que coinciden con tu perfil.

Analizando tu CV...

AspenView Technology Partners

Bogota