Detection and Response Engineer

📋 Description

• Own escalated security incidents end-to-end, including scoping, containment, and remediation
• Write, test, and deploy detection rules via Detection-as-Code pipeline
• Tune existing detections to reduce false positives
• Build and maintain SOAR playbooks and security automation
• Drive log source onboarding and ingestion health across environments
• Conduct threat hunting and lead threat modeling exercises

🎯 Requirements

• 2-4 years experience in incident response, SOC operations, or detection engineering
• Experience writing/tuning detection rules in a SIEM (YARA-L, CQL, KQL, or Sigma)
• Solid experience with SIEM and EDR platforms, log analysis, and incident triage
• Working knowledge of MITRE ATT&CK mapping to detection coverage
• Comfortable with Python, JavaScript, or similar scripting language
• Strong written communication for incident reports and documentation

🎁 Benefits

• Clear path toward senior detection engineering and IR ownership
• Direct mentorship from a Lead who owns the detection-as-code stack
• Exposure to real-world fintech security challenges
• Learning and development-focused environment
• Attractive salary, pension, health insurance, annual bonus