Specialist, Cyber Detection Engineer

Job Classification: Technology - Information Security

Are you interested in building capabilities that enable the organization with innovation, speed, agility, scalability, and efficiency? The Global Technology Operations team takes great pride in our culture where digital transformation is built into our DNA! When you join our organization at Prudential, you'll unlock an exciting and impactful career - all while growing your skills and advancing your profession at one of the world's leading financial services institutions.

Your Team & Role

The Specialist, Cyber Detection Engineer will serve as a hands-on technical contributor responsible for designing and maintaining enterprise threat detection capabilities across on-prem and cloud environments.

This role is focused on the continual improvement of detection capabilities, making sure they are aligned with enterprise risk and the evolving threat landscape. You will partner closely with other teams to design and build new detection capabilities that produce actionable and operationally effective alerting.

Here Is What You Can Expect on a Typical Day

• Operationalize security alerting and develop new custom detection capabilities across endpoint, identity, network, cloud, and application domains.
• Author and maintain detections using SIEM/XDR platforms, ensuring performance, scalability, and precision.
• Transform threat intelligence, incident learnings, purple-team results, and hunt findings into new detection content, enhancements, or coverage improvements.
• Validate detections using realistic attack scenarios, emulation results, historical data, and safe adversary simulations.
• Identify telemetry gaps and log data quality issues that limit visibility or detection effectiveness, and work with platform and infrastructure teams to remediate.
• Rapidly develop temporary analytics or scoping queries to support Incident Response efforts during active investigations.
• Participate in continuous improvement initiatives, metrics and reporting, and lifecycle management processes.

• 3+ years of experience in detection engineering, incident response, threat hunting, or security operations in large enterprise environments.
• Practical experience working with common Endpoint, Identity, Network, Cloud & SaaS technologies, and associated logging.
• Proven experience developing detection content across multiple telemetry sources.
• Strong proficiency with at least one major SIEM/XDR ecosystem and advanced query authoring (Splunk SPL, Microsoft KQL, SQL strongly preferred).
• Solid understanding of adversary tradecraft with practical experience applying MITRE ATT&CK to detection design, validation, and coverage assessment.
• Ability to reason about attacker behaviors, detection logic trade-offs, and operational impacts rather than relying solely on static indicators.
• Experience using common scripting languages (e.g. Python, PowerShell) and to solve problems, automation tasks and interact with REST/GraphQL APIs.
• Strong written and verbal skills, with the ability to communicate effectively with both technical and non-technical stakeholders.

• GIAC GDAT, GCDA, GCTD, GCTI, GMON, GCIH, GCFA, GCPY
• Splunk Power User
• Microsoft SC-200, AZ-500
• CompTIA Cybersecurity Analyst (CySA+)

• Medical, dental, vision, life insurance, disability insurance, Paid Time Off (PTO), and leave of absences, such as parental and military leave.
• 401(k) plan with company match (up to 4%).
• Company-funded pension plan.

•