Detection & Automation Engineer III (Cybersecurity)

Location: Milwaukee, WI, United States; hybrid

Salary: $108,160–$162,240 annually. Geographic-specific ranges may apply, including $118,960–$178,440 and $124,400–$186,600.

Company

hirify.global provides financial services and protects clients, advisors, and business platforms through cybersecurity and business operations.

What you will do

• Design, develop, test, and maintain advanced threat detections across cloud, identity, endpoint, database, and application environments.
• Administer and optimize Splunk Enterprise Security, including data models, dashboards, reporting, frameworks, and search performance.
• Onboard, normalize, validate, and troubleshoot security telemetry and data sources across enterprise infrastructure.
• Develop monitoring for privileged access, authentication activity, anomalous behavior, and sensitive data access in databases and business-critical applications.
• Build Detection-as-Code capabilities using version control, automated testing, CI/CD pipelines, and reusable frameworks.
• Improve detection coverage, alert fidelity, telemetry health, and operational effectiveness while mentoring junior engineers.

Requirements

• Bachelor’s degree in cybersecurity, information technology, computer science, engineering, or a related field, or equivalent professional experience.
• 2+ years of experience in cybersecurity, detection engineering, security operations, SIEM engineering, or a related discipline.
• Hands-on experience developing and maintaining threat detections in Splunk Enterprise Security or a comparable SIEM platform.
• Knowledge of security monitoring, log management, telemetry engineering, threat detection methodologies, and MITRE ATT&CK.
• Experience with cloud platforms, identity systems, endpoint security, applications, databases, enterprise infrastructure, and security data normalization.
• Experience with scripting or automation technologies such as Python or PowerShell, source control, automated testing, and CI/CD pipelines.

Nice to have

• Experience with Splunk Enterprise, Cribl Stream, Detection-as-Code, security automation, or large-scale telemetry architectures.
• Experience supporting cybersecurity monitoring and logging in regulated environments.
• Background in database administration, enterprise data engineering, audit logging standards, or security observability.
• Relevant certifications such as Splunk certifications, GIAC, CISSP, GCIA, or GCIH.

Culture & Benefits

• Collaborative work across cybersecurity, infrastructure, cloud, application, technical, and business teams.
• Opportunity to contribute to architectural standards and continuous security improvement.
• Focus on protecting clients, advisors, and business platforms.
• Equal opportunity workplace committed to inclusive participation and professional growth.