Sr Detection Engineer

Req. ID:

JR113607 Sr Detection Engineer

Our vision is to transform how the world uses information to enrich life for all.

Micron Technology is a world leader in innovating memory and storage solutions that accelerate the transformation of information into intelligence, inspiring the world to learn, communicate and advance faster than ever.

# 1\. Job Title & Role Overview

Senior Detection Engineer — Security Information and Event Management (SIEM) Engineering and Detection Content Engineering. Experience required: 4 to 8 years.

Role Overview

The Senior Detection Engineer is a senior technical contributor accountable for SIEM delivery and detection content engineering across the enterprise. You will design, build, test, deploy, tune, and continuously improve detections that draw on SIEM, Network Detection and Response (NDR), Endpoint Detection and Response (EDR), cloud, identity, network, endpoint, application, and email telemetry.

# 3\. Responsibilities and Tasks

## SIEM Engineering and Delivery

• Drive the design, implementation, maintenance, and optimization of the enterprise SIEM platform.

• Define and maintain the SIEM delivery roadmap in line with Global Security Organization strategy and business priorities.

• Onboard security-relevant log sources with appropriate parsing, normalization, enrichment, correlation, retention, and searchability.

• Monitor and improve platform availability, performance, scalability, capacity.

• Keep SIEM components on supported versions and ensure relevant patches and updates are applied.

• Troubleshoot data ingestion, pipeline, parsing, indexing, correlation, and platform performance issues.

• Maintain engineering standards, technical documentation, architecture artifacts, and operating procedures for the SIEM environment.

• Identify security-control and detection-coverage gaps and recommend prioritized improvements.

• Define security key performance indicators and engineering metrics for SIEM and detection capabilities.

• Maintain documented review of detection exceptions, accepted risks, suppressions, exclusions, and rule changes.

• Link engineering outcomes to the Global Security Organization’s strategic roadmap and business needs.

# 4\. Qualifications and Experience

• 4 to 8 years in cybersecurity, security engineering, SIEM engineering, detection engineering, or incident response With a BE/BTech graduation.

• Strong hands-on experience operating and engineering an enterprise SIEM platform.

• Experience integrating and analyzing telemetry from network, endpoint, cloud, identity, application, and email platforms.

• Proven ability to convert threat intelligence, adversary behaviors, and incidents into technical detection content.

# 5\. Required Technical Skills

• Data pipeline fundamentals — log ingestion, parsing, normalization, enrichment, schema mapping, correlation, indexing, retention, and data quality.

• Scripting — Python, PowerShell, Bash, or comparable, applied to automation and content engineering.

• Engineering tooling — hands-on use of APIs, Git or another version-control platform, and structured content-development practices.

• Analysis and documentation — strong analytical, troubleshooting, and technical-writing capabilities.

Detection query and analytics languages — proficiency in one or more of KQL, SPL, EQL, ES|QL, SQL, Lucene, Sigma, or equivalent.

# 6\. Security Technology Knowledge

These technologies matter here as telemetry sources and broader security domain context. Next-generation firewalls such as Cisco or Palo Alto Networks, plus firewall management and monitoring solutions and Endpoint security Tools (EDR, PAM, PKI, DLP).

• Web proxy and Secure Web Gateway technologies; Zscaler familiarity is preferred.

• Remote-access and SSL VPN solutions.

• Intrusion Prevention Systems such as Cisco Firepower or similar platforms.

• IPsec tunnels, site-to-site connectivity, and business-to-business interconnects.

• Stateful inspection, TCP/IP, DNS, HTTP/HTTPS, web protocols, and general networking concepts.

• Network Detection and Response technologies, SSL/TLS certificates, certificate exchange, PKI, and certificate management.

• Endpoint protection and EDR technologies such as SentinelOne, CrowdStrike, Carbon Black, or Cylance.

• Network data loss prevention technologies such as DarkTrace, McAfee

• Access control, data classification, and data-loss-prevention concepts. Cloud, identity, application, email, and endpoint security telemetry.
• Use AI-enabled security tools and automation to improve threat detection, incident response, and operational efficiency across cybersecurity environment.
• Identify opportunities to automate repetitive security tasks, reduce manual effort, and help build smarter, faster, and more scalable cyber operations.
• Apply AI and data-driven insights to analyze security events, correlate signals, and support proactive protection of systems, data, and intellectual property
• Understanding of AI/ML concepts and a strong willingness to learn and apply AI tools to improve cybersecurity operations, threat detection, and response efficiency.
• Automation-first mindset with the ability to identify repetitive manual tasks and leverage scripting, workflow automation, and AI-enabled tools to secure Micron more effectively.

Job Profile(s):

Info Security Eng E3

Relocation level: (TBD)

Before Getting Started

Please review Micron’s Internal Job Application Policy on your regional PeopleNow Career Opportunities page before searching and applying for jobs. Note in particular that:

• Hiring managers may view your performance appraisals, original resume, transcripts or other performance-related documentation in your personal file. This information will be held in confidence.
• If you are selected to interview for a position, you must notify your direct supervisor before participating in the interview process.

​​​​

As a world leader in the semiconductor industry, Micron is dedicated to your personal wellbeing and professional growth. Micron benefits are designed to help you stay well, provide peace of mind and help you prepare for the future. We offer a choice of medical, dental and vision plans in all locations enabling team members to select the plans that best meet their family healthcare needs and budget. Micron also provides benefit programs that help protect your income if you are unable to work due to illness or injury, and paid family leave. Additionally, Micron benefits include a robust paid time-off program and paid holidays. For additional information regarding the Benefit programs available, please see the Benefits Guide posted on Benefits | Micron Technology, Inc

Micron is proud to be an equal opportunity workplace and is an affirmative action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, age, national origin, disability, protected veteran status, gender identity or any other factor protected by applicable federal, state, or local laws.