AI Detection & Log Ingestion Engineer (26-09731) -

Position 8

AI Detection & Log Ingestion Engineer

Location

Remote (US)

Duration

6 Months plus

Job Description

Develop and maintain AI-specific detection rules and monitoring content.

Build correlation rules and behavioral analytics using available SIEM telemetry.

Create detection use cases covering

Shadow AI activity, Prompt-injection attempts, Sensitive-data exposure and data leakage, Privilege misuse, Unauthorized plugin activity, Model misuse

Test detection logic against available telemetry and document validation results.

Tune alerts to reduce false positives while preserving detection coverage.

Maintain detection thresholds, dependencies, investigation guidance, and response requirements.

Collaborate with logging and platform teams to identify and resolve telemetry gaps.