Lead Detection Engineer

Company Overview

With 80,000 customers across 150 countries, UKG is the largest U.S.-based private software company in the world. And we're only getting started. Ready to bring your bold ideas and collaborative mindset to an organization that still has so much more to build and achieve? Read on.

At UKG, you get more than just a job. You get to work with purpose. Our team of U Krewers are on a mission to inspire every organization to become a great place to work through our award-winning HR technology built for all.

Here, we know that you're more than your work. That's why our benefits help you thrive personally and professionally, from wellness programs and tuition reimbursement to U Choose - a customizable expense reimbursement program that can be used for more than 200+ needs that best suit you and your family, from student loan repayment, to childcare, to pet insurance. Our inclusive culture, active and engaged employee resource groups, and caring leaders value every voice and support you in doing the best work of your career. If you're passionate about our purpose - people -then we can't wait to support whatever gives you purpose. We're united by purpose, inspired by you.

• You will be providing hands-on solutions, customization and tuning, automation, and use case development for the SIEM, SOAR, and other stakeholder requirements for threat informed defense strategies
• You will support leading production level projects to completion as a contributor and a collaborator between multiple stakeholder teams including the Security Operations Center (SOC), Threat Intelligence, Incident Response, and Incident Response
• You will be working on a globally distributed team and expected to create and present strategies, technical plans, and architecture to audiences of technical and executive leadership levels when asked.
• You will also maintain existing internal code, use cases, and further extend SIEM and SOAR integrations aligned to the Detection Engineering program efforts
• You will design and engineer Security Operations focused integrations and automations including diagrams, documentation, and threat modeling of what is built
• You will support the Director of Detection Engineering in directly enhancing the strategic capabilities of the program through complex technical projects

• The ability to lead complex projects, other team members, and support building strategic and technical initiatives
• 7+ years of security and hands on technical automation experience, with 5 or more of those years focused on creating use cases and detection focused automation
• 5-7 years of operational experience working directly with or in security operational teams including: SOC, Threat Intelligence , and Incident Response
• Deep understanding of SOC, SIEM, and other engineering best practices, limitations, and ways of extending or customizing threat detection automation related use cases
• Demonstratable hands-on skills in a major scripting/programming language or a search query language for use in security operations and threat detection
• Experience with a major public cloud service provider (CSP) preferred
• Splunk Cloud ES and Splunk SOAR (Phantom) Experience highly preferred

• 25 days annual leave, increasing by one day per year to a maximum of 28 days
• 26 weeks paid maternity leave & 2 weeks paid paternity leave from start of employment
• Medical/Dental/Vision coverage provided through Laya Healthcare, including spouse and children up to the age of 25
• Pension plan through Irish Life, with an employer match of 100% of the employee contributions up to a maximum of 6%
• Life insurance
• Group Income Protection
• U choose program - ₠325 every quarter to be spent on eligible items such as exercise equipment/membership, pet care, child care, home office set-up etc.
• Tuition Reimbursement program - up to ₠4,625 per year
• Employee Assistance Program available 24/7
• Adoption assistance, Surrogacy Assistance, Fertility Support, Gender Affirming Support