Detection Engineer

Who We Are

Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we help clients with total transformation-inspiring complex change, enabling organizations to grow, building competitive advantage, and driving bottom-line impact.

To succeed, organizations must blend digital and human capabilities. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures—and business purpose. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, generating results that allow our clients to thrive.

What You'll Do

We continue to build out our continuous monitoring and detection programme and require an experienced Detection Engineer to help fortify its technical foundation. You will be responsible for developing advanced detections grounded in our real threat landscape, validated against enterprise telemetry, and continuously improved over time.

Using Splunk as our SIEM alongside native security platforms, you will build the detection capability that sits above operational alert triage—developing, validating, and maintaining the detections our Cyber Security Incident Response Team relies upon. Working across a large, evolving environment, you will translate offensive security findings into actionable detections that measurably strengthen BCG's global security posture.

Effective detection engineering requires equal parts technical depth, threat knowledge, and disciplined execution. This role sits at the intersection of all three, helping establish a detection programme that is threat-led, evidence-based, and continuously validated against evolving adversary techniques.

What you will do

As a Detection Engineer, you will help build BCG's global detection capability by developing high-confidence detections that improve our ability to identify and respond to evolving cyber threats. Working within Security Operations, you will translate threat intelligence, offensive security findings, and operational feedback into production-ready detections that strengthen our security posture.

• You will collaborate closely with Detection Engineering, CSIRT, Security Engineering, and our managed security provider to develop, validate, and continuously improve detection content. Your work will directly support threat detection, investigation, and response by ensuring detections are reliable, measurable, and based on high-quality security telemetry.
• Develop and maintain detection rules using SIEM, EDR, and other enterprise security platforms.
• Translate red team exercises, penetration testing findings, and threat intelligence into production-ready detections.
• Validate detections against available telemetry before deployment to ensure accuracy and operational effectiveness.
• Tune detection content using operational feedback to improve fidelity while reducing false positives.
• Contribute to ATT&CK coverage by identifying detection gaps and developing detections to address them.
• Develop investigation guidance and runbooks that enable consistent triage across CSIRT and our managed security provider.
• Partner with Security Engineering to ensure required telemetry supports effective detection development.
• Maintain detection documentation and lifecycle activities in accordance with established detection engineering standards.

What You'll Bring

• Experience developing and maintaining production detection rules across enterprise security platforms.
• Strong knowledge of MITRE ATT&CK and the ability to translate adversary techniques into effective detections.
• Advanced proficiency with Splunk SPL or similar query languages for security detection engineering.
• Understanding of offensive security techniques and experience validating detections through purple teaming, atomic testing, or similar approaches.
• Strong analytical skills and the ability to make sound technical decisions using incomplete or evolving information.
• Experience collaborating with Security Operations, Incident Response, Engineering, and other technical teams to improve detection capabilities.
• A disciplined, engineering-focused approach to producing reliable, maintainable, and well-documented detection content.

Who You'll Work With

You will join BCG's Security Operations team and work closely with colleagues across Cybersecurity to strengthen the firm's global detection capabilities. This role partners regularly with Security Engineering, CSIRT, Offensive Security, and our managed security provider to develop, validate, and continuously improve detection coverage across the enterprise.

You'll collaborate with teams across BCG to ensure detections are informed by real-world threats, supported by high-quality telemetry, and aligned with the firm's evolving security priorities.

#ISRM

Additional info

This job description reflects the core requirements of the role at the time of writing. Responsibilities may evolve as the detection engineering programme matures.

Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, disability, protected veteran status, or any other characteristic protected under national, provincial, or local law, where applicable, and those with criminal histories will be considered in a manner consistent with applicable state and local laws.
BCG is an E - Verify Employer. Click here for more information on E-Verify.