Detection Engineer – SIEM/EDR Threat Detection

EMW; Henegouwen; Hybride; EUR 70 000 - 100 000; Plein temps

Résumé du poste

EMW is seeking a Detection Engineer to design, implement, and maintain advanced detection rules across SIEM, EDR, and cloud environments in a NATO-focused security program. The role emphasizes translating attacker TTPs into effective detections, collaborating with CSOC, Threat Hunting, and other teams, and maturing the Detection-as-Code approach.

The candidate will work on on-site duties in Mons, Belgium, with security clearance prerequisites and a strong emphasis on MITRE ATT&CK alignment and

Qualifications

• Bachelor's degree in a related discipline.
• Minimum 3 years in SOC/CSOC or similar security monitoring.
• 3+ years designing, developing and maintaining detections across SIEM/EDR and cloud tools.

Responsabilités

• Design, develop, and maintain detection rules and alerts across SIEM/EDR/Cloud.
• Implement detection logic using Sigma, SPL and KQL.
• Align detections with MITRE ATT&CK and NATO TTPs.
• Maintain a structured detection engineering lifecycle (design, test, deploy, monitor, improve).
• Collaborate with CSOC and Threat Hunting teams to operationalize detections.

Connaissances

SOC experience

Detection engineering

SIEM/EDR/Cloud

MITRE ATT&CK mapping

NATO SECRET clearance

English proficiency

Formation

Bachelor's degree in related discipline

Outils

Splunk

Microsoft Sentinel

Azure

AWS

Description du poste

EMW is seeking a Detection Engineer to design, implement, and maintain advanced detection rules across SIEM, EDR, and cloud environments in a NATO-focused security program. The role emphasizes translating attacker TTPs into effective detections, collaborating with CSOC, Threat Hunting, and other teams, and maturing the Detection-as-Code approach.

The candidate will work on on-site duties in Mons, Belgium, with security clearance prerequisites and a strong emphasis on MITRE ATT&CK alignment and