Detection Engineer

Moro Hub; Dubai; On-site; AED 260,000 - 520,000; Full time

Job summary

Moro Hub is seeking a senior security detection engineer to lead the development, implementation and continuous improvement of detection capabilities across SIEM, EDR/XDR and SOAR. You will drive automation, validation and coverage to strengthen cyber defence enterprise-wide.

You will collaborate with threat hunting teams, implement MITRE ATT&CK mappings, and mentor junior engineers while delivering measurable improvements in detection quality and incident response readiness.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field.
• 7–10 years of cybersecurity experience focusing on detection engineering, SIEM, or threat detection.

Responsibilities

• Lead SIEM, EDR/XDR, and SOAR detection content development.
• Manage detection use case lifecycle, validation, and QA.
• Coordinate threat hunting and detection gap assessments.
• Improve enterprise threat detection coverage and maturity.
• Drive detection automation and continuous optimization.
• Align detection capabilities with emerging threats and attack techniques.
• Monitor and optimize detection performance and alert quality.
• Address detection gaps and support complex incident investigations.
• Track detection coverage, tuning activities, and operational KPIs.

Skills

SIEM detection rules

SPL/KQL

EDR/XDR detection

MITRE ATT&CK mapping

SOAR automation

Scripting (Python/PowerShell/Bash)

Threat intelligence & IOC

Detection testing & tuning

Log analysis & telemetry

Threat hunting & ATT&CK analysis

Cloud/Network/Endpoint/OT-IoT concepts

Dashboards & reporting

Root cause analysis

Technical documentation & mentoring

Education

Bachelor’s degree in Cybersecurity/CS/IT

Job description

About the Role

Lead the development, implementation, and continuous improvement of security detection capabilities across SIEM, EDR/XDR, and SOAR platforms. Ensure effective threat detection, monitoring coverage, alert quality, and automation to strengthen the organization’s cyber defence capabilities.

Responsibilities

• Lead SIEM, EDR/XDR, and SOAR detection content development.
• Manage detection use case lifecycle, validation, and quality assurance.
• Coordinate threat hunting and detection gap assessments.
• Improve enterprise threat detection coverage and maturity.
• Drive detection automation and continuous optimization.
• Align detection capabilities with emerging threats and attack techniques.
• Monitor and optimize detection performance and alert quality.
• Address detection gaps and support complex incident investigations.
• Track detection coverage, tuning activities, and operational KPIs.

Qualification & Experience:

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field.
• Should have 7–10 years of cybersecurity experience, with strong focus on detection engineering, SIEM, or threat detection.

Required Skills:

• Advanced SIEM detection rule and correlation search development.
• Strong SPL, KQL, or equivalent query language skills.
• EDR/XDR detection engineering and analytics.
• MITRE ATT&CK mapping and detection coverage assessment.
• SOAR playbook integration and security automation.
• Python, PowerShell, or Bash scripting.
• Threat intelligence and IOC integration.
• Detection testing, validation, and performance tuning.
• Log analysis, parsing requirements, and telemetry validation.
• Threat hunting and attack technique analysis.
• Cloud, network, endpoint, and OT/IoT detection concepts.
• Detection metrics, dashboards, and reporting.
• Root cause analysis and troubleshooting.
• Technical documentation and team mentoring.