Remote EU Cyber Threat Detection Engineer

Unisys; España; Hybrid; EUR 69,000 - 90,000; Full time

Job summary

Unisys is seeking a Cybersecurity Engineer to join a Threat Detection Engineering team for a freelance role. The position involves designing, implementing, and maintaining detection content across SIEM and runtime platforms, with a focus on Linux and containerized workloads within a remote EU framework.

The role requires advanced knowledge of Linux security, Kubernetes telemetry, and hands-on experience with container security tools such as Falco or Sysdig.

Qualifications

• Level 5 EU Qualifications Framework corresponds to two years of post-secondary education.
• Strong knowledge of Linux operating systems and Linux security.
• Ability to design, test, validate, deploy, and maintain runtime detection rules.
• Eligibility for a European Security Clearance at EU-LEVEL SECRET.

Responsibilities

• Develop threat-informed detection content by translating cyber threat intelligence and incident reports into detection objectives.
• Design, implement and maintain managed detection rules using the internal framework.
• Deploy detection rules across SOC platforms, including SIEM and endpoint/run-time detections.
• Develop detection use cases for Linux workloads and containers.
• Address threats related to execution, persistence, privilege escalation, credential access, and data exfiltration in containers/Kubernetes.

Skills

Linux security

Kubernetes security

Container security

Threat hunting

Detection engineering

Education

Level 5 EU Qualifications Framework

Tools

Falco

Sysdig

Job description

Unisys is seeking a Cybersecurity Engineer to join a Threat Detection Engineering team for a freelance role. The position involves designing, implementing, and maintaining detection content across SIEM and runtime platforms, with a focus on Linux and containerized workloads within a remote EU framework.

The role requires advanced knowledge of Linux security, Kubernetes telemetry, and hands-on experience with container security tools such as Falco or Sysdig.