Senior Threat Detection Engineer

About Lantern

Lantern is the specialty care platform connecting people with the best care when they need it most. By curating a Network of Excellence comprised of the nation's top specialists for surgery, cancer care, infusions and more, Lantern delivers excellent care with significant cost savings to employers and their workforces. Lantern also pairs members with a dedicated care team, including Care Advocates and nurses, for the entirety of their care journey, helping them get back to good health, back to their families and back to work. With convenient access to specialists nationwide, Lantern means quality care is within driving distance for most. Lantern is trusted by the nation's largest employers to deliver care to more than 6 million members across the country. Learn more about us at lanterncare.com. 

About You:

• You use LOGIC in your decision making and understand that progress is critical to making change. You focus on the execution of your content while balancing a fast-paced environment and you take the time to celebrate both the small & big wins. 
• INCLUSION is a core tenant of your personal beliefs. A diverse and inclusive environment is incredibly important to you. You understand and desire to be a part of a diverse team with different experiences and perspectives & you cherish the differences in each individual that you interact with.
• You have the GRIT, drive and ambition to tackle big problems. Big problems require big ideas and a team that supports new ideas. 
• You care deeply for your customers are driven to keep HUMANITY in all decisions. Your customers aren’t just the individuals using your product. They are the driving factor in your motivation to make a change.
• Integrity guides you in life. Focusing on the TRUTH vs. giving people the answers they want to hear. 
• You thrive in a Team Environment. Collaboration is key in innovation and creating change.

These pillars of LIGHT are a reminder to our team that we are making a difference by providing guidance and support in navigating the often complex and confusing landscape of healthcare. We hope that through this LIGHT, individuals can find their way to the best care, resources, and support they need to get back to life. 

 

If this sounds like you, we would love to connect to speak further about career opportunities at Lantern.

Please apply to our role & someone from our Talent Acquisition Team will reach out to help you navigate our interview process.

 

Lantern is seeking a highly skilled Senior Threat Detection Engineer (active builder, investigator, and guardian) to lead the development and optimization of our threat detection capabilities on our Security Operations team. This role will be instrumental in identifying malicious activity, improving detection logic, and collaborating across teams to enhance our security posture. Lead Incident Response investigations and reporting.

Location:  Remote, United States or Canada

Responsibilities:

• Design, implement, and tune detection rules and logic across SIEM, EDR, and cloud platforms.
• Develop and maintain threat detection use cases based on MITRE ATT&CK and other frameworks.
• Perform threat hunting and anomaly detection using behavioral analytics and telemetry.
• Collaborate with IAM, Data Protection, cloud security, and engineering teams to improve detection coverage.
• Analyze threat intelligence and integrate findings into detection strategies.
• Directly monitor, test, and calibrate detection use cases; analyze data to minimize false positives and maximize actionable alerts—proposing and executing code changes to achieve measurable improvements.
• Directly monitor, test, and calibrate detection use cases; analyze data to minimize false positives and maximize actionable alerts, proposing and executing code changes to achieve measurable improvements.
• Lead purple team exercises and detection validation efforts.
• Maintain technical documentation by directly managing the materials and summaries of your own work and solutions, and by actively communicating updates to stakeholders.
• Develop use-cases based on intelligence, red team results, and incident data
• Write detection and correlation rules to identify threats across our stack
• Assist in onboarding logs and identifying gaps in logs or alert results
• Develop a deep understanding of data models, macros, indexes, sources, and field alias and the technology foundation our detection stack is built
• Understand data schema/API standards, automation, and messaging systems
• Bring a metric-driven mindset to our