Detection Engineering Specialist - SIEM Migration

About the Role:

We are seeking a highly skilled Detection Engineering Specialist to lead the migration and optimization of our detection logic and alerting infrastructure to a new SIEM platform. This role is critical to ensuring the integrity, performance, and effectiveness of our security monitoring capabilities during and after the transition.

Key Responsibilities:

• Audit and document existing detection rules, use cases, and alert logic from the legacy SIEM.
• Rebuild or refactor detection rules using the native query language and capabilities of the new SIEM platform.
• Validate detection efficacy through rigorous testing and tuning.
• Ensure alert workflows, playbooks, and escalation paths are preserved or enhanced in the new environment.
• Collaborate with Incident Response (IR) teams to test and refine end-to-end alert triage and response processes.
• Integrate SOAR tools or automation pipelines to streamline detection and response.
• Map legacy SIEM data sources and detection logic to the new platforms architecture.
• Coordinate phased migration of log sources and detection content with minimal disruption.
• Monitor for gaps or failures in detection coverage during and after migration.
• Work closely with SOC, IR, and platform engineering teams to align detection strategies with operational needs.
• Maintain clear and comprehensive documentation of detection logic, migration steps, and validation results.

Qualifications:

• Proven experience with SIEM platforms (e.g., Splunk, Sentinel, QRadar, Elastic, etc.).
• Strong proficiency in detection engineering, including rule development and tuning.
• Familiarity with SOAR platforms and automation workflows.
• Experience in security operations, incident response, or threat detection.
• Excellent collaboration and communication skills.
• Strong documentation and process-tracking abilities.

Preferred:

• Experience with large-scale SIEM migrations.
• Knowledge of MITRE ATT&CK framework and threat modeling.
• Scripting or automation experience (e.g., Python, PowerShell).