Cyber Security Expert - Detection Engineer

beBeeDetection; Madrid; Presencial; EUR 35.000 - 60.000; Jornada completa

Descripción de la vacante

A leading company in cybersecurity is looking for a skilled professional to join their detection engineering team. This role involves contributing to the development and maintenance of detection logic, with key responsibilities including writing tests and analyzing data sets. The ideal candidate will have a solid background in detection technologies and strong communication skills, benefiting from a supportive work environment focused on well-being and career growth.

Servicios

Pension

Life Assurance

Share Save Scheme

Maternity & Paternity leave

Community & Volunteering Programs

Green Car Scheme

Cycle Scheme

Employee Referral Program

Learning & Development

Diversity & Inclusion

Formación

• Experience in detection engineering required.
• Proficiency in Suricata, Snort, Wireshark necessary.
• Strong communication and collaboration skills.

Responsabilidades

• Develop new detection logic and improve existing detection capabilities.
• Write and maintain detection test cases.
• Research and evaluate data sets and potential IOCs.

Conocimientos

Detection engineering

Communication skills

Analytical thinking

Herramientas

Suricata

Snort

Wireshark

Descripción del empleo

Key Security Talent Wanted for Detection Engineering Role

We are seeking a skilled professional to join our detection engineering team. In this role, you will contribute to the development of detection logic and maintain existing detection capabilities.

The ideal candidate will have experience in detection engineering, including proficiency in Suricata, Snort, Wireshark, and general PCAP assessments. Alternatively, candidates with experience in SOC or Managed Detection Services, or Analytically-minded IT Systems administration / Network Administration, and looking for a change in career / focus on Security may also be considered.

Candidates must possess excellent oral and written communication skills, as well as the ability to work collaboratively with client engagement teams and NCC colleagues to continuously improve the service we deliver.

• Develop new detection logic to contribute to detection engineering content repository
• Continuously improve existing detection logic
• Write and maintain detection tests cases
• Review findings of TI, CERT, and Red Team activities and evaluate from a detection engineering improvement perspective

The following key accountabilities include :

• Researching data sets and potential IOCs for distribution
• Running tools / techniques to get data
• Researching log sources and data sets
• Writing rules and alert logic
• Writing test processes and procedures for the logic
• Monitoring test output and bug fixing
• Monitoring the system & data health
• Add global filters to detection logic based on operational feedback
• Scheduling and deploying new analytics
• Keep generic detection lookups consistent with new Detection tools / versions
• Ensuring work is up-to-date or tracked

To excel in this role, you will need :

• Proven experience in detection engineering on a range of technologies (SIEM and EDR, ideally NDR as well)
• Technical skills in Suricata, Snort, Wireshark and general PCAP assessments

We offer a comprehensive benefits package, as well as opportunities for learning and development and career growth. We believe our people are at their brilliant best when they feel bolstered in all aspects of their well-being, and we offer wellness programs and flexible working arrangements to provide that vital support.

• Pension
• Life Assurance
• Share Save Scheme
• Maternity & Paternity leave
• Community & Volunteering Programmes
• Green Car Scheme
• Cycle Scheme
• Employee Referral Program
• Learning & Development
• Diversity & Inclusion

At (Company), our mission is to create a more secure digital future. That mission underpins everything we do, from our work with clients across a multitude of industries, delving into, securing new products, and emerging technologies, as well as solving complex security problems. Our teams' partner with clients across a multitude of industries, delving into, securing new products, and emerging technologies, as well as solving complex security problems.