Senior Detection Engineer

Dicetek LLC; Abu Dhabi; On-site; AED 520,000 - 900,000; Full time

Job summary

Dicetek LLC is seeking an experienced Senior Detection Engineer to design and drive a detection program across SIEM, EDR, and cloud security tools. You will hunt for novel threats, translate CTI into practical detections, and automate workflows to reduce manual effort while collaborating with threat intelligence teams.

The ideal candidate has 8+ years in cybersecurity with 4+ years in detection engineering, strong expertise in Microsoft Sentinel and IBM QRadar, and deep knowledge of MITRE

Qualifications

• 8+ years in cyber security with at least 4 years in detection engineering, threat detection or SOC roles.
• Proven experience designing or leading a detection engineering function in a large or regulated organisation.
• Expert-level hands-on experience with Microsoft Sentinel (KQL, analytics rules, workbooks, watchlists, automation) and IBM QRadar (AQL, custom rules, building blocks, DSMs).
• Proven track record of intelligence-driven detection development, turning CTI into operational detections.
• Knowledge of MITRE ATT&CK, D3FEND, Cyber Kill Chain, Diamond Model, Pyramid of Pain and NIST CSF.
• Experience with detection-as-code, Git-based version control and CI/CD pipelines.
• Strong understanding of attacker tradecraft across Windows, Linux, cloud (Azure/M365), identity and network environments.
• Scripting skills in Python and/or PowerShell.

Responsibilities

• Develop and implement advanced threat detection strategies and rules across SIEM, EDR, and Cloud security tools.
• Proactively hunt for sophisticated threats leveraging threat intelligence and forensic analysis.
• Automate detection processes and workflows to improve efficiency and reduce manual effort.
• Collaborate with threat intelligence teams to translate emerging threats into actionable detection logic.

Skills

Threat detection

Detection engineering

Git/CI/CD pipelines

Python

PowerShell

Threat intelligence

CI/CD

Sigma

Education

Bachelor's degree

Tools

Microsoft Sentinel

IBM QRadar

Sigma

YARA

Job description

• Develop and implement advanced threat detection strategies and rules across diverse security technologies (SIEM, EDR, Cloud security tools).
• Proactively hunt for novel and sophisticated threats within the enterprise environment, leveraging threat intelligence and forensic analysis.
• Automate detection processes and workflows to enhance efficiency and reduce manual effort in threat identification.
• Collaborate with threat intelligence teams to translate emerging threats and TTPs into actionable detection logic.

Desired Candidate Profile

Essential Requirements

• 8+ years' experience in cyber security, with at least 4 years in detection engineering, threat detection or SOC engineering roles.
• Proven experience designing or leading a detection engineering function in a large or regulated organisation.
• Expert-level hands‑on experience with Microsoft Sentinel (KQL, analytics rules, workbooks, watchlists, automation) and IBM QRadar (AQL, custom rules, building blocks, DSMs, reference sets).
• Proven track record of intelligence-driven detection development, turning CTI into operational detections.
• In-depth knowledge of MITRE ATT&CK, D3FEND, Cyber Kill Chain, Diamond Model, Pyramid of Pain and NIST CSF.
• Experience with detection-as-code, Git-based version control and CI/CD pipelines.
• Strong understanding of attacker tradecraft across Windows, Linux, cloud (Azure/M365), identity and network environments.
• Scripting skills in Python and/or PowerShell.

Highly Desirable

• Banking or financial services experience.
• Experience with Sigma, YARA and threat intelligence platforms (e.g., MISP, OpenCTI, Recorded Future).
• Experience in purple teaming, adversary emulation or red team collaboration.
• Experience with Microsoft Defender XDR, EDR platforms and SOAR tooling.
• Background in threat hunting or cyber threat intelligence.

Certifications (Preferred)

• GIAC certifications such as GCDA, GCIA, GCTI, GCIH or GREM
• Microsoft Certified: Security Operations Analyst Associate (SC-200)
• IBM QRadar certifications
• CISSP, OSCP or equivalent

Key Competencies

• Strategic leadership: able to build a function from the ground up and align it with business risk.
• Technical depth: expert-level detection development across Sentinel and QRadar.
• Threat-informed mindset: thinks like an adversary and prioritises based on intelligence.
• Stakeholder management: communicates detection posture clearly to executives, auditors and regulators.
• Mentorship: develops talent and spreads good engineering practice across the team.
• Analytical rigour: makes data-driven decisions supported by meaningful metrics.
• Composure under pressure: offers steady, structured leadership during significant incidents.

Education

Bachelor's degree in Computer Science, Information Security, Engineering or a related field, or equivalent professional experience.