Detection Engineer: SIEM/EDR/XDR with Clearance

WLG; Henegouwen; Sur place; EUR 65 000 - 90 000; Plein temps

Résumé du poste

WLG in Mons-area is seeking a Detection Engineer to design, build and run detections across SIEM, EDR and XDR, and to map them to the MITRE ATT&CK framework. You will write detection logic in Sigma, SPL or KQL and automate repetitive tasks to improve coverage.

Join a team that translates threat intel into actionable detections, supports incident handlers, and drives the detection lifecycle from design through deployment and continuous improvement.

Qualifications

• Proven detection engineering experience across SIEM/EDR/XDR.
• Hands-on work with a major SIEM and with endpoint and network detection tooling.
• Fluency in at least one detection language, and enough scripting to automate the rest.
• Familiarity with adversary tradecraft and the ATT&CK framework as a working tool.
• Professional English, and the ability to explain a detection decision to non-authors.

Responsabilités

• Designing, building and maintaining detection rules, alerts and analytics across SIEM, EDR and XDR, network detection and cloud security tooling.
• Writing detection logic in Sigma, SPL, KQL.
• Building detections around adversary behaviour and mapping to MITRE ATT&CK.
• Turning threat intelligence and purple team findings into automated detections.
• Running a detection lifecycle from design to improvement and monitoring.

Connaissances

Detection engineering

SIEM tooling

Endpoint detection

Scripting & automation

Threat intel & ATT&CK

English communication

Outils

Sigma

SPL

KQL

MITRE ATT&CK

Description du poste

WLG in Mons-area is seeking a Detection Engineer to design, build and run detections across SIEM, EDR and XDR, and to map them to the MITRE ATT&CK framework. You will write detection logic in Sigma, SPL or KQL and automate repetitive tasks to improve coverage.

Join a team that translates threat intel into actionable detections, supports incident handlers, and drives the detection lifecycle from design through deployment and continuous improvement.