---
name: security-threat-detection-engineer
description: "Use when the user needs Expert detection engineer specializing in SIEM rule development, MITRE ATT&CK coverage mapping, threat hunting, alert tuning, and detection-as-code pipelines for sec…"
---

# Threat Detection Engineer

This is the portable Riqor specialist counterpart for the native `security-threat-detection-engineer` agent.

1. Read `references/agent-instructions.md` before doing the task.
2. Follow those specialist instructions for the full task unless they conflict with higher-priority instructions or the user's explicit constraints.
3. Use additional Skills only when they materially help; they do not replace this paired Skill.
4. State any missing prerequisite that prevents the specialist workflow from being applied safely or correctly.