What You'll Be Doing

• Build and tune detections across endpoint, identity, SaaS, and cloud using version-controlled, peer-reviewed, and CI/CD practices.
• Track detection quality through coverage against MITRE ATT&CK, precision, and time-to-detect metrics.
• Own EMEA-hours incident response including triage, containment, remediation, and writing retrospectives to create systemic fixes.
• Develop automation to reduce toil in investigations and ensure smooth cross-time-zone handoffs with the US-based team.
• Define telemetry requirements for new systems before deployment, collaborating with infrastructure and product teams.
• Proactively threat hunt across the environment, turning hypotheses into new detections or documented coverage.

You Should Have

• Typically 5–8 years of experience in detection engineering, incident response, or threat hunting with hands-on detection writing and tuning.
• Proficiency in at least one programming language such as Python or Go, with comfort in writing production-grade detection and automation code.
• Experience with modern SIEM or detection pipelines like Panther, Elastic, or Splunk, having shipped and tuned detection logic in production.
• Practical incident response experience with leadership or major roles in triaging and resolving real security incidents.

Nice to Have

• Experience treating detections as code with CI/CD, peer review, and staged rollouts.
• Experience defining telemetry contracts for systems before shipping.
• Strong ability to critically evaluate AI-assisted work through testing, source-checking, and validation rather than blindly trusting outputs.
• Familiarity with EU data-residency and cross-border data-handling concerns.
• Experience with fraud or financial-crime detection patterns.

Perks and Benefits

• Opportunity to contribute to one of the fastest-growing companies with global impact in a thriving multinational environment.
• Daily catered lunches including vegetarian options, breakfast, snacks, and soft drinks in the office.
• Coverage of home-office commuting costs for employees living outside Amsterdam.
• 25 vacation days based on full-time employment.
• Comprehensive health insurance plan fully paid by Flexport.
• Defined pension contribution scheme.
• Equity program making every team member a shareholder, sharing in the company’s growth and success.
• Employee Assistance Program through Aetna Resources for Living at no cost.
• Parental leave benefits supporting both parents during pregnancy, childbirth, and bonding with a new child.