**Job Overview**
">
The role of a Lead Detection Engineer is to be part of the Global Security Detection Engineering team. This global team is responsible for detecting and responding to sophisticated cyber threats and attacks.
In this position, you will leverage various tools and resources to proactively detect, investigate, and respond to emerging and/or persistent threats impacting customers.
Responsibilities:
* Providing hands-on solutions, customization and tuning, automation, and use case development for SIEM, SOAR, and other stakeholder requirements for threat informed defense strategies
* Supporting leading production level projects to completion as a contributor and a collaborator between multiple stakeholder teams including the Security Operations Center (SOC), Threat Intelligence, Incident Response, and Incident Response
* Working on a globally distributed team and expected to create and present strategies, technical plans, and architecture to audiences of technical and executive leadership levels when asked
* Maintaining existing internal code, use cases, and further extending SIEM and SOAR integrations aligned to the Detection Engineering program efforts
* Designing and engineering Security Operations focused integrations and automations including diagrams, documentation, and threat modeling of what is built
* Supporting the Director of Detection Engineering in directly enhancing the strategic capabilities of the program through complex technical projects
Qualifications:
* The ability to lead complex projects, other team members, and support building strategic and technical initiatives
* 7+ years of security and hands on technical automation experience, with 5 or more of those years focused on creating use cases and detection focused automation
* 5-7 years of operational experience working directly with or in security operational teams including: SOC, Threat Intelligence, and Incident Response
* Deep understanding of SOC, SIEM, and other engineering best practices, limitations, and ways of extending or customizing threat detection automation related use cases
* Demonstratable hands-on skills in a major scripting/programming language or a search query language for use in security operations and threat detection
* Experience with a major public cloud service provider (CSP) preferred
* Splunk Cloud ES and Splunk SOAR (Phantom) Experience highly preferred
Benefits:
* 25 days annual leave, increasing by one day per year to a maximum of 28 days
* 26 weeks paid maternity leave & 2 weeks paid paternity leave from start of employment
* Medical/Dental/Vision coverage provided through Laya Healthcare, including spouse and children up to the age of 25
* Pension plan through Irish Life, with an employer match of 100% of the employee contributions up to a maximum of 6%
* Life insurance
* Group Income Protection
* U choose program – €325 every quarter to be spent on eligible items such as exercise equipment/membership, pet care, child care, home office set-up etc.
* Tuition Reimbursement program – up to €4,625 per year
* Employee Assistance Program available 24/7
* Adoption assistance, Surrogacy Assistance, Fertility Support, Gender Affirming Support
Where We're Going:
UKG is on the cusp of something truly special. Worldwide, we already hold the #1 market share position for workforce management and the #2 position for human capital management. Tens of millions of frontline workers start and end their days with our software, with billions of shifts managed annually through UKG solutions today. Yet it's our AI-powered product portfolio designed to support customers of all sizes, industries, and geographies that will propel us into an even brighter tomorrow
],