TED Engineer

Role Overview We’re seeking a REMOTE, hands-on Detection Engineer to support a threat detection and incident response team within a large financial services environment. This role will turn threat intelligence into production-ready detections while helping build and operate AI security agents (“digital teammates”) that support detection and response.

Key Responsibilities Build, tune, and deploy threat detections using Splunk and/or Crowd Strike Falcon / NG-SIEM.Convert threat intelligence into detections through research, enrichment, tuning, and deployment.

Design risk-based detections using scoring, correlation, and signal quality.

Build and operate AI/agent solutions for security detection and response.

Develop searches, dashboards, threat hunts, and security-data enrichment.

Analyze large security datasets and communicate findings to technical and business stakeholders.

Support emergency vulnerability and incident response efforts by rapidly developing new detections and threat hunts.

Required Skills Strong detection engineering experience with Splunk and/or Crowd Strike.

Hands-on experience building AI or agent-based solutions in production.

Experience across the threat intelligence-to-detection lifecycle.

Strong security-data analysis and problem-solving skills.

Excellent communication skills and ability to work through complex, ambiguous problems.

Must be fully dedicated to this engagement with no concurrent employment or contracts.

Preferred Anvilogic or other risk-based alerting frameworks.

Financial services / regulated industry experience.

Cribl, Splunk Edge Processor, Snowflake, Databricks, or Open Telemetry.

Splunk Cloud migration experience.

Python or similar scripting/development experience.
1481816_