Product-Focused Detection Engineer

Roca Alliances; Medellín; Hybrid; COP 60,000,000 - 120,000,000; Full time

Benefits offered by this job

Permanent contract

Health insurance

Global cross-functional teams learning

Job summary

Roca Alliances is recruiting two Detection Engineering Analysts to join the client’s Product Management organization. You will own investigations from signal to evidenced findings and hand them to Product Management with quantified, actionable results.

You will work daily with threat research, detection engineering, customer success, support, POV engineers and sales, bridging security operations and product leadership while helping keep detection ahead of attackers through POV outcomes.

Qualifications

• Proven security analyst experience in email security, SOC or threat research, preferably at a product or security vendor.
• Strong working knowledge of phishing, business email compromise (BEC), malware delivery and evasion techniques.
• Hands-on email analysis: header and payload inspection, URL and attachment analysis, understanding how scanners reach a verdict.
• Log analysis and the ability to reconstruct a verdict path across a layered detection chain.
• Comfort with data: querying large datasets with SQL or equivalent to measure impact, recurrence and trends, plus scripting in Python or similar to automate analysis.
• Clear written communication: turning a messy investigation into a short, quantified finding that engineers and product leaders can act on.
• Advanced English.

Responsibilities

• Monitor active POVs and fine-tune each account to its environment so every POV shows the full strength of the detection.
• Log your changes and share patterns with detection engineering.
• Use product analytics to identify prospects with unusual traffic or threat profiles, and work with POV engineers and sales to provide efficacy evidence.
• Classify each case against the detection taxonomy, map it to its delivery vector and detection layer, and flag new candidate categories.
• Track detection performance over time by category and layer, keeping trend views usable by non-analysts.
• Identify campaign clusters and emerging attacker techniques across accounts, and escalate them as single findings rather than a queue of tickets.
• Correlate trend data with external threat intelligence, internal threat research and competitive evaluations.
• Use AI tools to speed up classification, analysis and reporting.
• Triage feedback from security operations, customer success and support, and resolve configuration and expected-behavior cases independently.
• Investigate and reproduce reported cases, reconstruct verdicts across the detection chain and quantify their impact.
• Sit where threat research, engineering and product meet, with early sight of how attackers are changing their approach.
• A direct line to the people who decide what gets built next.
• A globally distributed team that values data-led decisions, direct communication and owning outcomes.
• Formal and on-the-job learning with cross-functional teams.

Skills

Security analyst experience

Phishing/BEC knowledge

Email header/payload analysis

SQL data querying

Python scripting

Advanced English

Job description

Roca Alliances is recruiting two Detection Engineering Analysts to join the client’s Product Management organization. You will own investigations from signal to evidenced findings and hand them to Product Management with quantified, actionable results.

You will work daily with threat research, detection engineering, customer success, support, POV engineers and sales, bridging security operations and product leadership while helping keep detection ahead of attackers through POV outcomes.