Security Detection Engineer (x/f/m) - DKB
Core
Develop detection logic and rules to identify cyberattacks across SIEM, EDR, cloud, and other security systems.
Role type
Security Detection Engineer
Builds
Detection rules and use cases for security systems
Domain
Cybersecurity / Threat Detection
Deliverable
production ML models
Required skills
MITRE ATT&CK framework, SIEM/EDR platforms, log and telemetry analysis, TTP translation, detection rule testing and optimization, Detection-as-Code processes
Preferred skills
Threat Hunting experience, SOC environment experience, cloud security telemetry knowledge
Technologies
SIEM, EDR, MITRE ATT&CK
Responsibilities
Develop use cases and detection rules for attack detection; Analyze threats and TTPs to create detection logic; Test and optimize detection rules to reduce false positives; Assess detection coverage gaps using MITRE ATT&CK; Collaborate with Threat Intelligence and Incident Response teams; Contribute to Detection-as-Code processes and automated deployment.
Seniority
Mid-Senior, hands-on IC
