HHiring Reality
← Expel

Managed SIEM Detection Engineer

Expel
Location
Remote
Posted
1 month ago
Department
Security
What they actually want (must-haves)
  • Hands-on SIEM expertise across Splunk, Microsoft Sentinel, and/or CrowdStrike NG SIEM
  • 3+ years with detection and response tooling, particularly SIEM, SOAR, and EDR
  • 3+ years writing, deploying, and tuning custom detections from research or investigative work
  • SIEM migration experience translating detection logic between platforms
  • Working knowledge of attacker tactics and techniques and the MITRE ATT&CK framework
  • Solid fundamentals across Windows, macOS, and Linux, networking basics, and cloud IAM models
Nice to have
  • One or more SIEM or vendor certifications
  • Experience authoring platform-agnostic detections with Sigma
  • Familiarity with detection-as-code practices
  • Industry security certifications such as GIAC, Security+, or similar
  • A bachelor's degree in Computer Science or Information Security
What the job really is

As a Managed SIEM Detection Engineer at Expel, you will leverage your expertise to enhance customers' SIEM systems, ensuring they effectively surface threats while minimizing alert noise and optimizing costs. Your role involves authoring and tuning detection content, migrating detection logic, and collaborating with various teams to deliver high-quality security solutions. This position offers opportunities for professional growth as the function evolves and expands.

Benefits
  • Base salary range between $111,900 and $162,300 USD + bonus eligibility and equity
  • Unlimited PTO
  • Work location flexibility
  • Up to 24 weeks of parental leave
  • Excellent health benefits
Things to weigh
  • No specific mention of the technology stack beyond SIEM platforms
  • Role involves a significant amount of optimization and tuning, which may not appeal to all candidates
  • Remote role limited to candidates authorized to work in the United States
Job score3/5
Benefits3/5
Freshness4/5
Career value4/5
Role clarity4/5
Pay transparency0/5

Applying to Expel?

See how your résumé matches this role — and tailor it from what actually gets interviews.