Detection Engineer

Job description

- Design, develop, and optimize detection use cases for SIEM, EDR, NDR, and XDR platforms. - Create and maintain detection rules, correlation logic, alert tuning, and behavioral analytics. - Map detections to MITRE ATT&CK techniques and adversary tactics. - Analyze logs and telemetry from endpoints, cloud, identity, network, and security tools. - Collaborate with SOC and Incident Response teams to improve detection coverage and reduce false positives. - Conduct threat modeling and identify detection gaps based on emerging threats. - Develop detection-as-code methodologies and automate deployment pipelines where applicable. - Support threat hunting initiatives by creating advanced detection logic. - Integrate threat intelligence feeds into detection mechanisms. - Perform continuous tuning and validation of alerts and detection content.