Lead Detection Engineer - SIEM, EDR/XDR & SOAR

Moro Hub; Dubai; On-site; AED 260,000 - 520,000; Full time

Job summary

Moro Hub is seeking a senior security detection engineer to lead the development, implementation and continuous improvement of detection capabilities across SIEM, EDR/XDR and SOAR. You will drive automation, validation and coverage to strengthen cyber defence enterprise-wide.

You will collaborate with threat hunting teams, implement MITRE ATT&CK mappings, and mentor junior engineers while delivering measurable improvements in detection quality and incident response readiness.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field.
• 7–10 years of cybersecurity experience focusing on detection engineering, SIEM, or threat detection.

Responsibilities

• Lead SIEM, EDR/XDR, and SOAR detection content development.
• Manage detection use case lifecycle, validation, and QA.
• Coordinate threat hunting and detection gap assessments.
• Improve enterprise threat detection coverage and maturity.
• Drive detection automation and continuous optimization.
• Align detection capabilities with emerging threats and attack techniques.
• Monitor and optimize detection performance and alert quality.
• Address detection gaps and support complex incident investigations.
• Track detection coverage, tuning activities, and operational KPIs.

Skills

SIEM detection rules

SPL/KQL

EDR/XDR detection

MITRE ATT&CK mapping

SOAR automation

Scripting (Python/PowerShell/Bash)

Threat intelligence & IOC

Detection testing & tuning

Log analysis & telemetry

Threat hunting & ATT&CK analysis

Cloud/Network/Endpoint/OT-IoT concepts

Dashboards & reporting

Root cause analysis

Technical documentation & mentoring

Education

Bachelor’s degree in Cybersecurity/CS/IT

Job description

Moro Hub is seeking a senior security detection engineer to lead the development, implementation and continuous improvement of detection capabilities across SIEM, EDR/XDR and SOAR. You will drive automation, validation and coverage to strengthen cyber defence enterprise-wide.

You will collaborate with threat hunting teams, implement MITRE ATT&CK mappings, and mentor junior engineers while delivering measurable improvements in detection quality and incident response readiness.