Hybrid Threat Detection Engineer

apply; España; Híbrido; EUR 55.000 - 90.000; Jornada completa

Descripción de la vacante

ADP is seeking a Threat Detection Engineer to join its Global Security team. You will design, develop, and refine threat detection, detection logic, and response capabilities across multiple security platforms.

You will work closely with CIRC, threat intelligence, threat hunting, and appdev teams to create and maintain cyber alert catalogs, improve detection quality, and automate workflows. Strong Python/SQL scripting and experience with SIEM and SOAR are required.

Formación

• 2+ years of experience in threat detection or threat hunting.
• Strong analytical skills and cross-functional knowledge across multiple security disciplines.
• Experience with databases and data warehouse technologies and solutions.
• Strong scripting skills in Python and PowerShell.
• Experience with SIEM and SOAR platforms.

Responsabilidades

• Develop advanced alerting capabilities based on threat intel and post-incident findings.
• Maintain expert understanding of attacks, vectors and emergent threats.
• Create and implement new detections for the SOAR platform on stakeholder requests.
• Collaborate with CIRC and threat management to capture requirements and needs.
• Build detection logic using security logs to detect malicious activity with high fidelity.
• Contribute to SOPs, playbooks, and workflow automation.

Conocimientos

Threat detection

Threat hunting

Scripting Python

PowerShell

Cloud platforms

SIEM/SOAR

Data analysis

SQL

Herramientas

SQL

Python

PowerShell

Descripción del empleo

ADP is seeking a Threat Detection Engineer to join its Global Security team. You will design, develop, and refine threat detection, detection logic, and response capabilities across multiple security platforms.

You will work closely with CIRC, threat intelligence, threat hunting, and appdev teams to create and maintain cyber alert catalogs, improve detection quality, and automate workflows. Strong Python/SQL scripting and experience with SIEM and SOAR are required.