Threat Hunting & Detection Engineer (us Federal)

Workday

McLean, VA, USA
Base: $159,600 - $239,400 usd; bonus/equity: eligi...
Fully remote
Splunk correlation searches and spl development
Aws cloudtrail guardduty inspector vpc flow logs
Fedramp high and dod il5 regulatory compliance
This role supports U.S. Federal Government contracts requiring United States citizenship and mandates working within high-security FedRAMP High and DoD IL5 environments

Job Summary

  • This role supports U.S. Federal Government contracts requiring United States citizenship and mandates working within high-security FedRAMP High and DoD IL5 environments.
  • The engineer is responsible for engineering, validating, and continuously improving detection capabilities using Splunk and cloud-native telemetry to reduce adversary dwell time.
  • Workday offers a competitive salary range of $159,600 to $239,400 USD along with flexible work arrangements requiring at least half the time in-office or with customers.

Matching Summary

This role supports U.S. Federal Government contracts requiring United States citizenship and mandates working within high-security FedRAMP High and DoD IL5 environments.

Salary

Base: $159,600 - $239,400 USD; Bonus/Equity: Eligible for Workday Bonus Plan and annual refresh stock grants; Benefits: Comprehensive benefits package including flexible work options

Skills & Requirements

Must-have

  • Splunk correlation searches and SPL development
  • AWS CloudTrail GuardDuty Inspector VPC Flow Logs
  • FedRAMP High and DoD IL5 regulatory compliance
  • MITRE ATT&CK mapping and adversary tradecraft
  • NIST SP 800-61r3 incident response lifecycle

Nice-to-have

  • Hypothesis-driven threat hunting in SaaS architectures
  • Identity-based attack vector detection expertise
  • Container and workload-level attack detection
  • SOAR platform experience in constrained environments
  • Secure logging architecture in air-gapped settings

Key Requirements

  • 6+ years of cybersecurity operations or detection engineering experience
  • Bachelor's degree in Cybersecurity, Computer Science, Engineering, or equivalent
  • Ability to obtain and maintain TS/SCI w/CI Poly security clearance
  • Must be a United States citizen (naturalized or native)

Work Rights

Must have US citizenship

Tailored Resume

Cover Letter