Threat Detection Architect

Cyber Gate Defense; Emirados Árabes Unidos; Presencial; AED 250 000 - 380 000; Tempo integral

Resumo da oferta

Cyber Gate Defense is seeking a senior Detection Engineer to own design, development, and maintenance of detections across SIEM, XDR, EDR, and cloud platforms in the UAE. You will translate threat intel and incidents into production use cases, map detections to MITRE ATT&CK, and drive validation, testing, and deployment with CI/CD pipelines.

You will collaborate with SOC analysts, write Python scripts, and develop robust telemetry and data quality improvements while contributing to automated

Qualificações

• Experience in detection engineering and SIEM content development.
• Ability to translate threat intel and incidents into production detections.
• Strong knowledge of MITRE ATT&CK and threat hunting.
• Proficiency in Python and REST APIs; familiarity with Git and CI/CD.

Responsabilidades

• Design, develop, test, deploy, tune, and maintain detection rules across SIEM/XDR/EDR/UEBA platforms.
• Own the detection lifecycle from intake to retirement, including validation and deployment.
• Translate adversary activities into testable detection hypotheses and use cases.
• Map detections to MITRE ATT&CK and data sources; plan coverage improvements.
• Create tests and run purple-team exercises; automate with scripting and APIs.
• Contribute to CI/CD workflows and content review, testing, and deployment.

Conhecimentos

Detection engineering

SIEM content engineering

Threat hunting

SOC engineering

Python

REST APIs

Git

CI/CD

KQL

SPL

AQL

SQL

EQL

Lucene

YARA

Sigma

MITRE ATTACK

Ferramentas

Microsoft Sentinel

IBM QRadar

Splunk Enterprise Security

Stellar Cyber

Elastic Security

ArcSight

LogRhythm

Descrição da oferta de emprego

Cyber Gate Defense is seeking a senior Detection Engineer to own design, development, and maintenance of detections across SIEM, XDR, EDR, and cloud platforms in the UAE. You will translate threat intel and incidents into production use cases, map detections to MITRE ATT&CK, and drive validation, testing, and deployment with CI/CD pipelines.

You will collaborate with SOC analysts, write Python scripts, and develop robust telemetry and data quality improvements while contributing to automated