Job details
- Location (primary)
- Remote USA
- Location (secondary)
- Manassas, VA
- Work model
- Remote within the continental United States, with quarterly team weeks in person
- Job type
- Full-Time (exempt position)
- Department
- Security
- Requisition
- SL-2026-207
Company description
ServLogi provides dedicated cloud infrastructure for government and regulated enterprise. Our work spans physical infrastructure, platform engineering, security, and the operational support behind a deployment.
Teams work on configuration, provisioning, monitoring, documentation, and delivery. Each role describes its responsibilities, required experience, location, and any applicable clearance requirements.
Job description
Good detection is the difference between catching an intruder in minutes and finding them months later. Our detection engineers write the logic our analysts rely on.
You will build detections as code, test them against real attack behavior, and work closely with the operations floor to improve them.
Responsibilities
- Write, test, and maintain detection rules across host, network, and cloud data.
- Run attack simulations to confirm detections work.
- Measure alert quality and retire rules that no longer earn their place.
- Share findings with customers and the wider security team.
Requirements
- Four or more years in detection engineering, threat hunting, or incident response.
- Experience writing detections in Sigma, KQL, SPL, or similar.
- Scripting skills in Python.
- Solid understanding of Windows and Linux internals.
Preferred qualifications
- Experience with purple team exercises.
- Background in a regulated industry.
Compensation
The posted range for this role is $152,000 to $204,000 per year. Where an offer lands inside that range depends on several factors, including but not limited to:
- Relevant education, qualifications, active security clearances, and experience
- Specialized skills, abilities, and job-specific knowledge
- Performance, contribution, and delivered results
- Geographic location and required on-site facility presence
- Shift, schedule, or on-call rotation requirements
- Internal and external market equity
- Evolving business and organizational needs
The range listed reflects what we believe to be the likely compensation band for this role at the time of posting. Actual compensation may fall above or below it. This range applies to work performed in California, Colorado, New York, and Virginia, and to remote roles that can be performed from those states. The range may be revised in the future.
Pay transparency documentation is available on request from jobs@servlogi.com.
Incentive programs
You will be eligible to participate in ServLogi's Short-Term Incentive plan, which awards against both company-wide operational stability and individual performance.
Depending on role and impact, you may also be eligible for our Long-Term Incentive program, which may include restricted stock units or cash equivalents. Eligibility varies by role and by plan terms. Equity awards are also available to eligible new hires so the team shares in the long-term performance of the infrastructure it builds.
Benefits
So the team stays sharp, healthy, and focused, we offer:
- Paid vacation and paid sick leave
- Medical, dental, and vision insurance
- Life, accident, and disability insurance
- Flexible Spending Accounts and Health Savings Accounts
- Employee Assistance Program
- Supplemental voluntary benefits, including legal plan, pet insurance, critical illness, accident, and hospital indemnity cover
- Tuition and certification reimbursement, including CISSP, CCSP, and FedRAMP assessor training
- Transit and commuting benefits
- Recognition through the ServLogi Star Program
- Employee Stock Purchase Plan
- ServLogi Savings 401(k) Plan with company match
No amount of pay or incentive bonus is considered earned until the conditions of the applicable compensation plan are fully met.
Additional information
Equal employment opportunity
ServLogi is committed to providing equal opportunity to all applicants and employees. We hold our infrastructure to a high standard, and we apply that same standard of fairness to our hiring. We will not discriminate against any applicant or employee on the basis of race, color, ancestry, religion (including religious dress and grooming standards), sex (including pregnancy, childbirth or related medical conditions, and breastfeeding), gender (including gender identity, gender expression, and gender-related appearance and behavior), age, national origin, sexual orientation, medical condition, marital status (including domestic partnership status), physical or mental disability, genetic information, protected medical and family care leave, Civil Air Patrol status, military or veteran status, or any other legally protected characteristic. Harassment based on any of these characteristics is prohibited.
Our non-discrimination policy applies to every aspect of employment. We comply with the laws and regulations described in the "Know Your Rights: Workplace Discrimination is Illegal" poster. Our pay transparency policy is available on request.
Diversity in defense and engineering
Infrastructure resilience requires diversity of thought. Defending against complex threats and building high-security systems means eliminating groupthink. A fusion of perspectives leads to stronger and more secure outcomes for our employees, for the customers who depend on us, and for the missions we support. We are committed to an inclusive environment where people from all backgrounds can contribute meaningfully and succeed together.
Accessibility and accommodations
ServLogi is committed to offering opportunities to applicants with disabilities, and to making sure every candidate can navigate our careers pages and hiring process. If you need an accommodation, contact jobs.accommodations@servlogi.com. Include a description of the accommodation you need along with the job title and requisition number.
Application timeline
We may close an application earlier than posted if the position is filled. If a role stays open past its posted deadline, we update the posting with a revised date.