📢 New: get today's jobs on our WhatsApp Channel
Jobiglo

No results.

Senior Detection Engineer

AspenView Technology Partners · Bogota

New
Onsite Senior 🇬🇧 English
Elastic Security EQL ES|QL KQL Splunk Sentinel Chronicle Abstract Security Cribl Logstash CrowdStrike Falcon Microsoft Defender Okta System Log AWS CloudTrail GuardDuty Git Python PowerShell MITRE ATT&CK Sigma YARA Atomic Red Team Caldera SOAR

Job description

About the role

The Senior Detection Engineer will design, build, test and tune security detections for a 24/7 SOC serving a large US consumer lender. Work will be performed on‑site from AspenView’s secure delivery suites in Bogotá, collaborating closely with a US‑based Detection Engineering Lead.

Key responsibilities

  • Own detection use cases end‑to‑end: research, logic, testing, documentation, release and client approval.
  • Build correlation and multi‑stage detections across endpoint, identity, network, email and cloud telemetry.
  • Create custom IOAs in CrowdStrike, detections in Microsoft Defender, identity detections on Okta and AWS control‑plane coverage.
  • Tune noisy rules, fix parsers and resolve data‑quality issues in the Elastic pipeline.
  • Peer‑review rules, turn hunt findings into backlog items and support major incidents with emergency detections.

Required profile

  • Several years of experience writing, testing and tuning detections in production on a SIEM or analytics platform.
  • Deep understanding of attack visibility across endpoint, identity and cloud telemetry mapped to MITRE ATT&CK.
  • Strong English communication (B2+) to defend rule logic to US‑based stakeholders.
  • Autonomous, evidence‑driven mindset treating detections as code with Git, peer review and change control.
  • Willingness to work onsite in Bogotá during US Eastern business hours.

Required skills

  • Elastic Security (EQL, ES|QL, KQL) and/or Splunk, Sentinel, Chronicle.
  • Data pipeline tools: Abstract Security, Cribl, Logstash.
  • Endpoint/identity/cloud platforms: CrowdStrike Falcon, Microsoft Defender, Okta System Log, AWS CloudTrail, GuardDuty.
  • Version control and scripting: Git, Python, PowerShell.
  • Familiarity with Sigma, YARA, Atomic Red Team, Caldera, SOAR playbooks.

What we offer

  • Competitive base salary.
  • Flexible work model: hybrid, remote or in‑office.
  • Real growth opportunities and visibility with leadership.
  • Inclusive, respectful culture blending U.S. innovation with Colombian heart.
  • Company that listens, invests in you and celebrates wins together.

Questions fréquentes

Le salaire n'est pas communiqué publiquement par le recruteur. Vous pouvez postuler et négocier directement avec AspenView Technology Partners.
Cliquez sur "Postuler maintenant" en haut de la page. Vous pouvez importer votre CV en 1 clic — Jobiglo extrait automatiquement vos informations et postule pour vous.

Why are you reporting this job?

Thank you for your report. We will review this job.

Apply in 30 seconds

Enter your email to apply. An account will be created automatically.

Apply now →

By continuing, you accept our terms of use.

Already have an account? Login

A question about this job?

Ask it here: you will get the full job summary by e-mail, right away.

💬 Chat with us on Telegram

Published 21 hours ago

Expires 1 month from now

6 views · 0 interested

Boost your chances

Upload your CV — we will match you with relevant openings.

Analyzing your CV...

AspenView Technology Partners

Bogota