Security Engineer, Detection and Response

📋 Description

• Build and tune high-signal detections across cloud, identity, endpoint, and SaaS environments, with
• Contribute to the detection platform, including rule lifecycle management, tuning, measurement, and
• Build tooling and automation that speed up triage, enrichment, investigation, and detection
• Turn threat intelligence and adversary TTPs into detections, telemetry requirements, and response
• Take part in investigations, incident response, and postmortems, and help turn what we learn into
• Help define and track metrics such as coverage, MTTD, and alert quality.

🎯 Requirements

• 3+ years of experience in detection engineering, security operations, incident response, threat
• Have written or tuned detections that run in production, and care about signal quality and cutting
• Working knowledge of at least one detection or query language (Sigma, KQL, SPL, YARA-L, EQL, or
• An understanding of how attackers operate (for example, MITRE ATT&CK), and the ability to use
• Hands-on experience with AWS, GCP, or Azure, ideally including identity and access logs.
• Have used SIEM, EDR, or SOAR tools in any size of environment.

🎁 Benefits

• Highly competitive cash compensation, equity, and benefits.
• Base salary range: €75,000–€142,000 per year.