Detection Engineer, Manager

Discover Financial
Richmond, New York, Plano
Full timeUSD 197,300 - 225,100 annuallyFunction: CybersecurityExperience: 4+ yearsEducation: bachelorsSkills: ["Analytical","Communication","Cross-functional collaboration","Root cause analysis","Mentorship","Continuous improvement"]

Own end-to-end detection coverage for the endpoint threat surface, from telemetry onboarding and coverage gap analysis through high-fidelity alert deployment. Lead detection-as-code (YAML rules in GitHub with CI/CD) and drive behavioral detections using EDR telemetry and user/entity signals. Use MITRE ATT&CK to prioritize coverage, leverage LLM/ML workflows to reduce false positives, and mentor engineers while partnering with CSOC, CTI, and threat hunt teams to meet fintech compliance and audit standards.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Discover Financial
Discover Financial
3 days ago

Detection Engineer, Manager

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 5 hours agoStatus: Live

Job Summary

Own end-to-end detection coverage for the endpoint threat surface, from telemetry onboarding and coverage gap analysis through high-fidelity alert deployment. Lead detection-as-code (YAML rules in GitHub with CI/CD) and drive behavioral detections using EDR telemetry and user/entity signals. Use MITRE ATT&CK to prioritize coverage, leverage LLM/ML workflows to reduce false positives, and mentor engineers while partnering with CSOC, CTI, and threat hunt teams to meet fintech compliance and audit standards.
Location: Richmond, New York, Plano
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Manager level

Key Responsibilities

  • •Own end-to-end detection coverage for the endpoint threat surface, including telemetry onboarding, alert deployment, tuning, and continuous coverage gap analysis.
  • •Lead the design, development, and maintenance of detection rules using Detection-as-Code (YAML) with CI/CD, peer review, and testing workflows.
  • •Design high-fidelity behavioral detections using user/entity behavior signals, process telemetry, and correlation logic to distinguish malicious from benign activity at scale.
  • •Use MITRE ATT&CK to visualize, prioritize, and close endpoint coverage gaps, balancing fidelity, volume, and operational risk.
  • •Provide technical leadership and mentorship, collaborating with CSOC, CTI, threat hunt, and business leaders to ensure robust monitoring and audit-compliant documentation.

Pay and Benefits

Salary: USD 197,300 - 225,100 annually

Key Requirements

  • •At least 4 years of experience in cybersecurity or information technology.
  • •At least 4 years of experience with endpoint and host logs (Windows Event Logs, Sysmon, EDR telemetry).
  • •At least 2 years of experience with EDR platforms (CrowdStrike Falcon, SentinelOne, Microsoft Defender).
  • •At least 4 years of experience developing alerts for threat detection.
  • •At least 2 years of experience with penetration testing/offensive security or adversary emulation, plus at least 1 year using machine learning or data science for security use cases.
Experience:4+ yearsEndpoint securityEDRThreat detectionThreat huntingSecurity engineeringPenetration testing
Education:Bachelor's
Skills:AnalyticalCommunicationCross-functional collaborationRoot cause analysisMentorshipContinuous improvement
Certifications:GCIAGCIHCISSPGMONGREMGCTDMLEAWS Cloud PractitionerAWS Security
Tech Stack:LLMsMachine learningSQLMITRE ATT&CKDetection-as-CodeYAMLGitHubCI/CDEDR telemetryWindows Event LogsSysmonCrowdStrike FalconSentinelOneMicrosoft DefenderGitHub CI/CDDatabricksApache SparkStreaming data platformsRed TeamProcess injection

Eligibility

Work Authorization:Authorization required. Sponsorship not provided.

Company Brief

Discover Financial
Provides consumer banking products, credit cards, personal loans, and payment services through the Discover brand. It operates a major U.S. financial network and serves individuals and merchants with lending and digital payment solutions.
Industry: Retail Banking
Company Size: Enterprise (1,001+ employees)
Revenue: USD 10M to 25M
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: Riverwoods, United States
Founded: 1985
WebsiteLinkedIn