Detection Engineer

Build the Future with AspenView Technology Partners

At AspenView, we are passionate about transforming the way organizations approach technology. We specialize in creating high-performing, nearshore IT teams to help North American clients innovate faster and more efficiently.

As we continue to grow, we’re looking for exceptional people to join our team and help drive impactful change across industries.

Why Join AspenView?

At AspenView, we’re more than a nearshore IT partner—we’re a people-first, purpose-driven company that believes great culture drives great outcomes. We’re passionate about connecting talent and technology to deliver measurable value for clients—and meaningful career paths for our people.

Here’s what you can expect:

• Competitive base
• Flexible work model: hybrid, remote, or in-office
• Real growth opportunities and leadership visibility
• Inclusive, respectful culture that blends U.S. innovation with Colombian heart
• A company that listens, invests in you, and celebrates wins together

The Senior Detection Engineer is a hands-on professional responsible for designing, building, testing and tuning the detections that decide which security events become alerts for a 24/7 SOC serving a large US consumer lender. Working on-site from AspenView's secure delivery suites in Bogotá or Buenos Aires, you will work across telemetry from CrowdStrike, Microsoft Defender, Okta, Palo Alto, Proofpoint and AWS flowing through Abstract Security into Elastic. You will be one of two senior detection engineers on the service, reporting to a US-based Detection Engineering Lead you speak with daily. This role calls for real autonomy: you will be expected to take a use case from idea to production without being walked through it.

What you will do:

Detection Development

• Own detection use cases end to end, from threat research and logic to testing against simulated attacks, documentation and release, with client approval for changes that affect alerting.
• Build correlation and multi-stage detections across endpoint, identity, network, email and cloud telemetry, designed around the attack chains a consumer lender actually sees.
• Create custom IOAs in CrowdStrike, custom detections in Microsoft Defender, identity detections on Okta, and AWS control-plane coverage.

Tuning & Data Quality

• Tune the noisiest and weakest rules with evidence, documenting what changed, the effect on the false-positive rate, and proof the rule still catches what it should.