Threat Detection Engineer — On-Site in Mons

WLG; Henegouwen; Sur place; EUR 60 000 - 90 000; Plein temps

Résumé du poste

WLG seeks a detection engineer to design, build and maintain rules and analytics across SIEM, EDR and XDR, plus network and cloud tooling. You will write detection logic in Sigma, SPL, or KQL and map findings to MITRE ATT&CK with adversary tradecraft in mind.

You will translate threat intelligence and purple team results into automated detections, manage the detection lifecycle, and collaborate with incident handlers and threat hunters during live investigations. On-site work is near Mons.

Qualifications

• Experience designing and building detection pipelines and alerts.
• Hands-on work with a major SIEM and with endpoint and network detection tooling.
• Fluent in at least one detection language and capable of scripting for automation.

Responsabilités

• Designing, building and maintaining detection rules, alerts and analytics across SIEM, EDR and XDR, network detection and cloud tooling.
• Writing detection logic in Sigma, SPL, KQL or equivalent languages.
• Mapping detections to MITRE ATT&CK and adversary tradecraft concepts.

Connaissances

Detection engineering

Version control

Code review

Scripting for automation

Threat intel familiarity

Formation

Bachelor's degree in CS or related

Outils

SIEM platforms

EDR tools

NDR tools

Description du poste

WLG seeks a detection engineer to design, build and maintain rules and analytics across SIEM, EDR and XDR, plus network and cloud tooling. You will write detection logic in Sigma, SPL, or KQL and map findings to MITRE ATT&CK with adversary tradecraft in mind.

You will translate threat intelligence and purple team results into automated detections, manage the detection lifecycle, and collaborate with incident handlers and threat hunters during live investigations. On-site work is near Mons.