Cybersecurity
Detection Engineering / Threat Hunting career guide
Builds, tests and tunes detections; proactively hunts for threats that evaded alerts.
Open postings (60 days)4
Remote1
TrackCybersecurity
Job titles
- Detection Engineer
- Threat Hunter
- Security Analyst (Detection)
Skills employers ask for
- Detection engineering
- Threat hunting
- Rule tuning
- Detection-as-code
- Log source onboarding
- Hypothesis-driven hunting
- Adversary emulation
- Coverage mapping
- Query languages
- Sigma
- YARA
- Splunk
- Elastic
- Microsoft Sentinel
- Sysmon
- Zeek
- Suricata
- Velociraptor
Certifications for Detection Engineering / Threat Hunting roles
- GCDA
- GCIA
- GCTI
- CySA+
- Splunk Core
- SC-200
- Elastic Certified
Recent Detection Engineering / Threat Hunting postings
Detection Engineer IIInstacart · Remote · USA · Remote
Senior Detection Engineer | SecOpsArq · London
Senior Security Engineer - Detection EngineeringFastly · Denver, CO; New York City, NY; San Francisco, CA
Senior Detection Engineering & Threat Hunting AnalystHuntress Labs · Australia
Get hired as a Detection Engineering / Threat Hunting
Match your resume to live postings, tailor it to each one, and practice for the certifications they ask for.
Create a free accountFrequently asked questions
What does a Detection Engineering / Threat Hunting do?
Builds, tests and tunes detections; proactively hunts for threats that evaded alerts.
What skills does a Detection Engineering / Threat Hunting need?
Common skills in Detection Engineering / Threat Hunting postings include Detection engineering, Threat hunting, Rule tuning, Detection-as-code, Log source onboarding, Hypothesis-driven hunting, Adversary emulation, Coverage mapping, Query languages, Sigma.
Which certifications help for Detection Engineering / Threat Hunting roles?
Employers often ask for GCDA, GCIA, GCTI, CySA+, Splunk Core, SC-200.
How many Detection Engineering / Threat Hunting jobs are open?
ReconHire lists about 4 recent postings that match Detection Engineering / Threat Hunting titles, and 1 of them are remote.