Detection Engineer – SIEM/EDR & Threat Hunting

Spektrum; Henegouwen; Sur place; EUR 65 000 - 95 000; Plein temps

Résumé du poste

Spektrum supports apex purchasers (NATO, UN, EU, and National Government and Defence) with specialist services in aerospace and defence security. The NATO NCIA engagement requires skilled detection engineers to design, develop, and maintain rule sets for SIEM, EDR/XDR, and cloud security tools.

You will implement detection logic using Sigma, SPL and KQL, align detections with MITRE ATT&CK, and collaborate with the Threat Hunting Team to operationalise findings for NATO infrastructure.

Qualifications

• A minimum requirement of a Bachelor’s degree from a recognised university in a related discipline with three years post‑related experience.
• Three+ years hands-on experience in a Security Operations Centre (SOC/CSOC/GSOC) or similar cyber monitoring environment.
• At least three years designing, developing and maintaining detection rules and analytics across SIEM, EDR/XDR and cloud security tools.
• Experience translating attacker TTPs and threat intel into operational detection logic.
• Experience with Splunk, Microsoft Sentinel, and log ingestion pipelines.

Responsabilités

• Design, develop, and maintain detection rules, alerts and analytics across SIEM, EDR/XDR, NDR and Cloud Security Tools.
• Implement detection logic using Sigma, SPL and KQL.
• Develop detections aligned with adversary behaviours and MITRE ATT&CK framework.
• Maintain a structured detection engineering lifecycle within CSOC.
• Review detection quality metrics and perform gap analyses against NATO infrastructure.
• Collaborate with Threat Hunting Team to operationalise findings into automated detections.
• Provide security analysis and investigative support during ongoing cybersecurity incidents.

Connaissances

SOC

Detection engineering

Splunk

Microsoft Sentinel

KQL

Formation

Bachelor’s degree in a related discipline

Outils

Azure

AWS

EDR/XDR

SIEM

Description du poste

Spektrum supports apex purchasers (NATO, UN, EU, and National Government and Defence) with specialist services in aerospace and defence security. The NATO NCIA engagement requires skilled detection engineers to design, develop, and maintain rule sets for SIEM, EDR/XDR, and cloud security tools.

You will implement detection logic using Sigma, SPL and KQL, align detections with MITRE ATT&CK, and collaborate with the Threat Hunting Team to operationalise findings for NATO infrastructure.