Cybersecurity Engineer, Detection Engineer

Responsibilities

• Engineer and optimize threat detection logic to identify and analyze emerging cyber threats across enterprise IT and industrial control systems (ICS/OT).
• Build, test, and maintain security automation and orchestration workflows within SIEM and SOAR platforms to accelerate detection and response.
• Monitor networks, systems, and applications for signs of potential cybersecurity incidents and perform initial investigations.
• Translate complex threat intelligence into high-fidelity detection capabilities and enhance incident response playbooks.
• Collaborate with threat hunting, incident response, and infrastructure teams to align detection strategy with operational resiliency.
• Document detection content, orchestration logic, and tuning efforts to support internal knowledge sharing and auditability.

Requirements

• Bachelor’s Degree in Information Technology, a related field, or equivalent experience.
• 2+ years of relevant cybersecurity experience.
• Hands-on experience with SIEM platforms such as Splunk, Google SecOps, or QRadar, including detection rule creation and alert tuning.
• Proficiency in scripting languages such as Python or PowerShell.
• Experience with security automation and orchestration (SOAR) platforms.

Preferred Qualifications

• Professional certifications such as Security+, Network+, OSCP, GIAC, or CEH.
• Familiarity with ICS/OT networks and industrial protocols (e.g., Modbus, DNP3, OPC).
• Knowledge of threat frameworks including MITRE ATT&CK and the Cyber Kill Chain.

Benefits

• Access to health, vision, and dental insurance.
• 401k matching program.
• Paid time off and paid parental leave.
• Educational reimbursement.
• Eligibility for a discretionary company-sponsored annual bonus program.

About the Company

Marathon Petroleum Corporation (MPC) is an energy industry leader committed to fostering a collaborative team environment that welcomes new ideas and diverse perspectives. We focus on protecting critical infrastructure and providing a great place to work for professionals dedicated to safeguarding digital and operational assets.