--- title: Detection Automation Engineer at Zermount description: Zermount is hiring for the Detection Automation Engineer role in Arlington, VA. Pays $95K–$140K per year. See the full description and apply. type: job url: https://www.foundrole.com/jobs/detection-automation-engineer-at-zermount-01a18a23-eead-7a59-b398-06492a6c83ee date: 2026-10-30T00:16:28Z og_description: Join Zermount as Detection Automation Engineer in Arlington, VA. Pays $95K–$140K per year. Full-time, hybrid role. og_image: https://www.foundrole.com/og/hacdjf.png breadcrumbs: - label: Home url: https://www.foundrole.com/ - label: Search url: https://www.foundrole.com/jobs --- | | | |---|---| | **Company** | Zermount | | **Location** | Arlington, VA (Hybrid) | | **Salary** | $95K/yr - $140K/yr | | **Type** | Full Time | | **Posted** | Oct 29, 2026 | ## Is this job real? **Ghost job check:** B · Low risk. Probably a real opening. ## Visa sponsorship - **H-1B:** No H-1B sponsorship on record for Zermount. - **E-Verify:** No E-Verify enrollment on record for Zermount. ## Pay for similar jobs Most similar jobs pay $110,000 – $163,000 a year (median $135,000). ## Description # **Detection and Automation Engineer** **Position Overview** The Detection and Automation Engineer develops, tests, tunes, maintains, and documents the analytics, detections, dashboards, scripts, interfaces, and automation that support security monitoring and response. The role combines hands-on engineering with disciplined validation, documentation, troubleshooting, and collaboration across analysts, threat hunters, intelligence personnel, platform engineers, and operational stakeholders. **Duties & Responsibilities** - Develop, test, maintain, and document custom analytics, detections, dashboards, scripts, interfaces, and automation playbooks. - Tune sensors, rules, alerts, and analytics to improve fidelity, reduce false positives, and support efficient analyst workflows. - Translate threat intelligence, hunt findings, incident lessons, and operational observations into improved detection content and response logic. - Prototype and integrate approved technologies or custom capabilities needed to address monitoring, detection, response, or reporting gaps. - Validate custom capabilities before operational use and document results, dependencies, limitations, configuration requirements, and maintenance considerations. - Develop and maintain automation, orchestration, and response playbooks using approved tools and platforms. - Diagnose and correct failed automation and workflows; safely restore or roll back affected functions and document corrective actions. - Recommend targeted improvements to SOC tools, workflows, detections, dashboards, scripts, interfaces, and content. - Support deployment, configuration, integration, and troubleshooting of security tools and sensors. - Maintain version-controlled technical content, test cases, operating notes, and training materials for detections and automation. **Qualifications** **Minimum Requirements:** - Three or more years of cybersecurity engineering, detection engineering, security analytics, or SOC automation experience. - Experience developing or tuning security analytics in an enterprise SIEM or comparable monitoring platform. - Experience scripting or integrating systems using Python, PowerShell, APIs, JSON, or comparable technologies. - Experience testing security capabilities, documenting engineering work, and troubleshooting production issues. - Ability to collaborate with analysts and stakeholders to translate operational needs into technical solutions. **Preferred Qualifications:** - Experience with Splunk SPL, Microsoft Sentinel KQL, Sigma, YARA, or comparable detection technologies. - Experience developing playbooks in a SOAR or workflow-automation platform. - Working knowledge of MITRE ATT&CK and practical detection-testing methods. - Experience with cloud telemetry such as AWS CloudTrail, Azure Monitor, or Microsoft 365 audit logs. - GCIA, GCDA, GCED, Splunk, Microsoft, CySA+, Security+, or comparable role-aligned certifications preferred. - Experience supporting a 24x7 SOC where detection or automation failures have operational consequences. **What Success Looks Like** - Detection content is accurate, maintainable, testable, and tied to operational needs and observable data. - Automation reduces manual effort without obscuring failure, creating unmanaged risk, or weakening analyst control. - False positives, duplicate coverage, stale content, and broken workflows are identified and corrected promptly. - Technical content and test evidence are sufficient for repeatable deployment, maintenance, and operational handoff. **Education and Certifications:** - Minimum: Bachelor's degree in cybersecurity, computer science, software engineering, information systems, or a related field; additional relevant experience may be considered in lieu of a degree **Clearance Level:** - Active Secret clearance required. **Work Location** - Hybrid federal customer environment. Onsite work may be required for integration, testing, deployment, or customer-directed activities. **Hours of Operation** - Core business hours with participation in after-hours support for automation, detection, and workflow failures as assigned. - Ability to pass a minimum background investigation. ## Skills - Cloud Computing - Microsoft 365 - Scripting - Cyber Security - Analytics - Microsoft Azure Sentinel - IBM Certified SOC Analyst - QRadar SIEM V7.4.3 Plus CompTIA Cybersecurity Analyst - Splunk - Detection Engineering - Software Deployment - Python - Azure Monitor - Automation - Secret Security Clearance - Kusto Query Language (Kql) - Cyber Threat Intelligence - Sensor Systems - Information Systems - Security Orchestration, Automation and Response (Soar) - Windows PowerShell - Workflow Automation - Six Sigma - Corrective And Preventive Action (Capa) - JSON - Maintenance - Computer Science - Telemetry - SIEM - Test Case Design - MITRE Att&ck Software - Audit Logging - AWS CloudTrail - CompTIA Security+ ## Related - [Technology & Software jobs](https://www.foundrole.com/careers/technology-and-software?utm_source=ai_markdown)- [QA & Testing jobs](https://www.foundrole.com/careers/technology-and-software/qa-and-testing?utm_source=ai_markdown)- [Test Automation Engineer / SDET jobs](https://www.foundrole.com/careers/technology-and-software/qa-and-testing/test-automation-engineer-sdet?utm_source=ai_markdown)- [Browse all companies](https://www.foundrole.com/companies?utm_source=ai_markdown) ## Explore this job market - [IT Services and Consulting](https://www.foundrole.com/sectors/technology/it-services-and-consulting?utm_source=ai_markdown) — 134247 jobs - [Virginia](https://www.foundrole.com/locations/us/virginia?utm_source=ai_markdown) — 103659 jobs - [Arlington, VA](https://www.foundrole.com/locations/us/virginia/arlington?utm_source=ai_markdown) — 8016 jobs ## Related pages - [IT Services and Consulting](https://www.foundrole.com/sectors/technology/it-services-and-consulting?utm_source=ai_markdown) — 134247 jobs - [Virginia](https://www.foundrole.com/locations/us/virginia?utm_source=ai_markdown) — 103659 jobs - [Arlington, VA](https://www.foundrole.com/locations/us/virginia/arlington?utm_source=ai_markdown) — 8016 jobs ## Browse - [Companies](https://www.foundrole.com/companies?utm_source=ai_markdown) - [Jobs by country](https://www.foundrole.com/locations?utm_source=ai_markdown) - [Jobs in the United States by state and city](https://www.foundrole.com/locations/us?utm_source=ai_markdown) - [H1B sponsors by location](https://www.foundrole.com/h1b-sponsors?utm_source=ai_markdown) - [H1B salaries](https://www.foundrole.com/h1b-salaries?utm_source=ai_markdown) - [Sectors and industries](https://www.foundrole.com/sectors?utm_source=ai_markdown) - [Jobs by career field](https://www.foundrole.com/careers?utm_source=ai_markdown) - [Latest jobs](https://www.foundrole.com/jobs/latest?utm_source=ai_markdown)