Detection Engineer — Herndon, VA at Peraton

About Peraton

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. We operate at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. Our employees serve as valued partners to essential government agencies and support every branch of the U.S. armed forces, solving the most daunting challenges our customers face every day.

About the Role

We are seeking a highly skilled and innovative Detection Engineer to join our team in the greater DMV area, where you will play a pivotal role in supporting the Army National Guard. In this position, you will be the bridge between raw telemetry and actionable security insights. Your work will involve translating complex threat intelligence, CDAP findings, and vulnerability data into robust detection use cases and alerting content. You will collaborate closely with SOC and NOSC analysts to refine rule logic, validate detections against observed activity, and ensure operational readiness. This role is essential for maintaining high-fidelity visibility across SIEM, IDS/IPS, endpoint, and OT/DCI monitoring platforms, ensuring that our defenses evolve alongside emerging threats.

Hiring Process

The application period for this role is estimated to be 30 days from the posting date, though this timeline may be adjusted based on business needs and candidate availability. By applying, you express your interest in the role and the company. During the review process, selected candidates may be required to participate in an on-camera interview and a process to verify their identity.

Equal Opportunity

Peraton is an equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.

Work location

Work model: On-site

904, McDaniel Court, Herndon, Fairfax County, Virginia, 20170, United States

Herndon, Virginia

Key Responsibilities

check_circleDevelop and maintain detection logic across SIEM, IDS/IPS, endpoint, and OT/DCI platforms
check_circleTranslate threat intelligence and vulnerability data into detection use cases and alerting content
check_circleDocument detection logic, metadata, and versioned content to support auditability
check_circleCollaborate with SOC and NOSC analysts to tune alerts and validate detections
check_circleUpdate runbooks and support analysts during triage and validation workflows
check_circleCoordinate with data engineers to ensure telemetry ingestion and field mapping
check_circleTest detection rules in lab environments to verify functionality and reduce false positives
check_circleReview telemetry quality and report coverage gaps affecting detection visibility

Requirements

verified2 years with BS/BA, 0 years with MS/MA, or 6 years with no degree
verifiedActive TS/SCI clearance
verifiedBachelor's degree in Computer Science, Cybersecurity, Data Science, Information Systems, Information Technology, or Software Engineering OR Relevant DoD/military training OR Relevant professional certification (GMON, GRID, CEH, Cloud+, CySA+, GSEC, PenTest+, Security+, SSCP)
verifiedDetection engineering, SOC analytics, or security operations experience
verifiedExperience authoring correlation rules/signatures and analytic queries in SIEM/analytics languages (e.g., KQL, SPL, Sigma)
verifiedFamiliarity with IDS/IPS signature development, EDR/endpoint detection, and OT/DCI telemetry characteristics

Nice to Have

Prior DoD/ARNG or enterprise SOC/NOSC detection engineering experience. Experience mapping detections to MITRE ATT&CK and integrating CTI/CDAP/CHAP inputs into use-case prioritization. Familiarity with automated testing frameworks, SOAR integrations, and detection performance metrics (precision/recall, MTTD).

Benefits & Perks

check_circleMedical, dental, and vision insurancecheck_circleLife insurancecheck_circleHealth savings accountcheck_circleParental leave401(k) retirement plan

Skills, education and keywords

Skills: Siem, Ids/ips, Ot/dci, Correlation Rules, Signatures, Behavioral Analytics, Threat Intelligence, Cdap, Chap, Vulnerability Data.

Education: Bachelor's degree in specified fields OR equivalent military training/certification.

Frequently asked questions about Detection Engineer with Security Clearance at Peraton

What does a Detection Engineer with Security Clearance at Peraton do?expand_more

In this Detection Engineer with Security Clearance at Peraton role, you will develop and maintain detection logic across siem, ids/ips, endpoint, and ot/dci platforms; translate threat intelligence and vulnerability data into detection use cases and alerting content; document detection logic, metadata, and versioned content to support auditability; and collaborate with soc and nosc analysts to tune alerts and validate detections.

What are the requirements for this Detection Engineer with Security Clearance role?expand_more

To qualify for the Detection Engineer with Security Clearance at Peraton position, applicants should have: 2 years with BS/BA, 0 years with MS/MA, or 6 years with no degree; Active TS/SCI clearance; Bachelor's degree in Computer Science, Cybersecurity, Data Science, Information Systems, Information Technology, or Software Engineering OR Relevant DoD/military training OR Relevant professional certification (GMON, GRID, CEH, Cloud+, CySA+, GSEC, PenTest+, Security+, SSCP); Detection engineering, SOC analytics, or security operations experience; Experience authoring correlation rules/signatures and analytic queries in SIEM/analytics languages (e.g., KQL, SPL, Sigma); and Familiarity with IDS/IPS signature development, EDR/endpoint detection, and OT/DCI telemetry characteristics.

Where is the Detection Engineer with Security Clearance role at Peraton located?expand_more

Detection Engineer with Security Clearance at Peraton is based in 904, McDaniel Court, Herndon, Fairfax County, Virginia, 20170, United States. This is a on-site role.

Is this Detection Engineer with Security Clearance job remote, hybrid, or on-site?expand_more

Peraton has listed this Detection Engineer with Security Clearance role as on-site.

How much experience is required for this Detection Engineer with Security Clearance role?expand_more

Detection Engineer with Security Clearance at Peraton typically requires 2–6 years of relevant experience at the mid level level.

What skills do you need for the Detection Engineer with Security Clearance role at Peraton?expand_more

Key skills for Detection Engineer with Security Clearance at Peraton include Siem; Ids/ips; Ot/dci; Correlation Rules; Signatures; Behavioral Analytics; Threat Intelligence; and Cdap.

What education is required for Detection Engineer with Security Clearance at Peraton?expand_more

Educational requirements for this role: Bachelor's degree in specified fields OR equivalent military training/certification.

What category does the Detection Engineer with Security Clearance role belong to?expand_more

Detection Engineer with Security Clearance at Peraton is part of the it job category on Recrutus.

Detection Engineer with Security Clearance