Cyber Detection Engineering Lead (d/f/m)
Core
Architect and lead the detection ecosystem for a defense organization, transforming threat intelligence into high-fidelity detection logic and bridging raw telemetry to actionable security intelligence.
Role type
Senior IC Cyber Detection Engineering Lead
Builds
High-fidelity detection rules, automated response playbooks, and detection-as-code frameworks for the SOC
Domain
Defense / Cybersecurity
Deliverable
production ML models | product features
Required skills
Detection strategy definition, MITRE ATT&CK framework expertise, Detection-as-Code, Python programming, Windows/Linux OS internals, Red Teaming/Penetration Testing mindset, SOC environment experience, technical mentorship
Preferred skills
Leadership experience, cross-functional collaboration, automation framework experience
Technologies
Python, MITRE ATT&CK, Sigma, Windows, Linux
Responsibilities
Define long-term detection engineering vision and align roadmaps with risk profiles; Architect and optimize detection rules against MITRE ATT&CK and Sigma standards; Translate Cyber Threat Intelligence (CTI) into proactive detection logic; Drive Detection-as-Code initiatives and engineer automated response playbooks; Act as primary escalation point for complex technical issues and mentor junior engineers; Partner with Incident Response and SOC teams for rapid threat containment