Principal Detection Engineer

Introduction

Do you have the career opportunities as a Principal Detection Engineer you want with your current employer? We have an exciting opportunity for you to join HCA Healthcare which is part of the nation's leading provider of healthcare services, HCA Healthcare.

Benefits

HCA Healthcare, offers a total rewards package that supports the health, life, career and retirement of our colleagues. The available plans and programs include:

• Comprehensive medical coverage that covers many common services at no cost or for a low copay. Plans include prescription drug and behavioral health coverage as well as free telemedicine services and free AirMed medical transportation.
• Additional options for dental and vision benefits, life and disability coverage, flexible spending accounts, supplemental health protection plans (accident, critical illness, hospital indemnity), auto and home insurance, identity theft protection, legal counseling, long-term care coverage, moving assistance, pet insurance and more.
• Free counseling services and resources for emotional, physical and financial wellbeing
• 401(k) Plan with a 100% match on 3% to 9% of pay (based on years of service)
• Employee Stock Purchase Plan with 10% off HCA Healthcare stock
• Family support through fertility and family building benefits with Progyny and adoption assistance.
• Referral services for child, elder and pet care, home and auto repair, event planning and more
• Consumer discounts through Abenity and Consumer Discounts
• Retirement readiness, rollover assistance services and preferred banking partnerships
• Education assistance (tuition, student loan, certification support, dependent scholarships)
• Colleague recognition program
• Time Away From Work Program (paid time off, paid family leave, long- and short-term disability coverage and leaves of absence)
• Employee Health Assistance Fund that offers free employee-only coverage to full-time and part-time colleagues based on income.

Learn more about Employee Benefits

Note: Eligibility for benefits may vary by location.

Our teams are a committed, caring group of colleagues. Do you want to work as a(an) Principal Detection Engineer where your passion for creating positive patient interactions is valued? If you are dedicated to caring for the well-being of others, this could be your next opportunity. We want your knowledge and expertise!

Job Summary and Qualifications

As a Principal Detection Engineer, you will serve as a subject matter expert (SME) in developing advanced security analytics to help detect and mitigate emerging cyber threats. The Principal Detection Engineer plays a key role in maximizing the effectiveness of the Security Information and Event Management (SIEM) and security data analytics platforms, while also providing thought leadership and mentoring to a team of engineers responsible for developing signature-based and behavior-based threat detections.

The ideal candidate for the Principal Detection Engineer position will have extensive experience developing security analytics for cybersecurity, insider threat or fraud use cases and be familiar with advanced detection engineering concepts such as Risk-Based Alerting (RBA) and Detection-as-Code (DaC). The Principal Detection Engineer should possess familiarity with one or more of the following areas: Cloud (IaaS/PaaS), Network, Endpoint, Container and Orchestration, and IoT. The Principal Detection Engineer should also be able to communicate threat detection concepts effectively with external teams and stakeholders.

Major Responsibilities:

• Researches emerging threat TTPs and IOAs using threat intelligence and the MITRE ATT&CK framework, and designs scalable detection solutions to ensure the organization remains protected against new and evolving threats.
• Demonstrates proficiency in multiple scripting and query languages, including Python, Splunk query language (SPL), Kusto query language (KQL) and GCP BigQuery / SQL.
• Applies machine learning (ML) models and statistical methods to enhance detection capabilities.
• Identifies data enrichment opportunities to add valuable contextual information to detections.
• Identifies tuning opportunities to reduce false positives while increasing detection efficacy.
• Enhances and maintains CI/CD pipelines to ensure efficient, high-quality and rapid deployment of detection content.
• Conducts threat hunting activities as part of the detection research and development process.
• Collaborates with the Threat Intelligence team to assess cyber threat intelligence and drive threat informed defense.
• Participates in purple teaming and threat modeling exercises to identify new high value detections as well as gaps with existing detections.

What qualifications you will need:

• Bachelor's degree - Required
• 7+ years of experience in a security data analytics or data science role - Required
• Detection engineering expertise - Required
• Master's degree - Preferred

Work Location/Schedule:

• 100% Remote - U.S., not offering visa sponsorship

HCA Healthcare has been recognized as one of the World's Most Ethical Companies by the Ethisphere Institute more than ten times. In recent years, HCA Healthcare spent an estimated $3.7 billion in cost for the delivery of charitable care, uninsured discounts, and other uncompensated expenses.

"Bricks and mortar do not make a hospital. People do."- Dr. Thomas Frist, Sr.
HCA Healthcare Co-Founder
If you are looking for an opportunity that provides satisfaction and personal growth, we encourage you to apply for our Principal Detection Engineer opening. We promptly review all applications. Highly qualified candidates will be contacted for interviews. Unlock the possibilities and apply today!

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.