Security Engineer
Core
Build, test, and maintain high-fidelity detection rules and incident response capabilities for a Security Operations Centre using SIEM and cloud telemetry.
Role type
Security Engineer (Detection Engineering)
Builds
Detection-as-code pipelines, automated testing, and SOC workflows
Domain
Cybersecurity, Cloud Infrastructure, SIEM
Required skills
Python, Elastic SIEM, Microsoft Sentinel, KQL, CI/CD, Git, Cloud Infrastructure (AWS/Azure), Threat Hunting, MITRE ATT&CK
Preferred skills
XDR platforms, SOAR, Log enrichment, Data pipeline engineering
Technologies
Elastic SIEM, Microsoft Sentinel, AWS, Azure, GCP, Python, Git, KQL
Responsibilities
Build and maintain detection rules; Develop detection-as-code pipelines; Support incident response; Conduct proactive threat hunts; Write automation tooling; Collaborate on cloud logging coverage; Engage with customers on telemetry sources
Seniority
Mid-Senior, hands-on IC
