Detection Engineer

Vector Synergy; Brussel; On-site; EUR 65,000 - 95,000; Full time

Job summary

Hunter International, Inc. is seeking a cybersecurity professional to design, develop, and maintain detection rules and analytics across SIEM, EDR/XDR, NDR, and cloud security tools. The role emphasizes translating detections into actionable alerts for incident response and external partners.

You will implement detection logic with Sigma, SPL, and KQL, mentor junior analysts, and contribute to defense against Advanced Persistent Threats in regulated environments, including NATO-focused scenarios.

Qualifications

• Bachelor's degree in cyber security, information technology, computer science or a related discipline.
• Experience in regulated, high-control environments such as defence, government, or financial services.

Responsibilities

• Design, develop, and maintain detection rules, alerts, and analytics across SIEM, EDR/XDR, NDR, and cloud security tools.
• Implement detection logic using Sigma, SPL, and KQL.
• Develop detections aligned with adversary behaviours and the MITRE ATT&CK framework, focusing on APTs targeting NATO.

Skills

Detection engineering

Mentoring

Cyber security analysis

Regulated environments

Automation / SOAR use cases

Education

Bachelor's degree in Cyber Security / IT / CS

Tools

Sigma

SPL

KQL

SIEM/EDR/XDR

Job description

• Experience developing detections for network and edge security devices such as Cisco, Fortinet/ Fortigate , Palo Alto, or comparable platforms ;
• Experience supporting or mentoring less-experienced analysts and engineers, providing constructive feedback on investigation quality and reporting standards ;
• Proven track record of conducting in-depth analysis of complex cyber-security incidents and delivering clear reports and recommendations to supporting teams and external partners .
• A university degree ( Bachelor's ) in Cyber Security, Information Technology, Computer Science or a related discipline ;
• Experience working in a regulated , high control environment such as defence , government , financial services or other enterprise sectors ;
• Practical experience with automation or SOAR use cases , identifying repetitive manual tasks and creating enrichment or workflow improvements . .

Duties/role:

Designing, developing, and maintaining detection rules, alerts, and analytics across SIEM, EDR/XDR, NDR, and cloud security tools ;

Implementing detection logic using Sigma, SPL, and KQL ;

Developing detections aligned with adversary behaviours and the MITRE ATT&CK framework, with a focus on Advanced Persistent Threats (APTs) targeting NATO.