Engineer II, Threat Detection - Windows (Hybrid)

Build high-fidelity behavioral endpoint detections for Windows adversary activity on the Falcon sensor platform. Analyze intrusions, malware execution telemetry, and intrusion campaigns to identify coverage gaps, then author and optimize Indicators of Attack rules. Validate detections using endpoint telemetry, tune for precision/false positives, and manage the full detection lifecycle from development through staged deployment and production monitoring. Collaborate across threat intelligence, engineering, and incident response teams.