Requirements

• 8+ years in detection engineering, security operations, or threat hunting
• Strong Python skills
• Deep experience with detection-as-code
• Strong experience with SIEM platforms
• Deep understanding of cloud and identity telemetry
• Working knowledge of EDR tools
• Fluency with attacker TTPs
• Collaborative and pragmatic mindset
• Demonstrated curiosity about AI tools and emerging technologies

Nice to Have

• Experience detecting software supply chain and CI/CD threats
• Experience with adversary emulation frameworks or running purple-team exercises
• Experience with data engineering for security

What You'll Be Doing

• Design, build, and maintain high-fidelity detections
• Own our detection-as-code pipeline
• Map and close coverage gaps against MITRE ATT&CK
• Onboard and normalize new telemetry sources
• Measure and improve alert quality
• Validate detections against real attacker behavior
• Turn incidents and threat intelligence into detections
• Build enrichment and automation in our SOAR platform

Perks and Benefits

• Generous, transparent, and fair compensation system
• Health insurance with dental and travel coverage
• Breakfast and lunch catering on office working days
• Vacation allowance
• Career growth budget
• Home office setup budget
• Gym/Fitness card
• Fertility healthcare and family-forming support
• Mental Health Support
• Group life insurance
• MacBooks with necessary accessories