Senior Detection Engineer

Allianz Technology; Madrid; Híbrido; EUR 117.000 - 143.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Hybrid work model

Company bonus

Pension

Employee shares program

Descripción de la vacante

Allianz Technology, headquartered in Munich, seeks a Senior Cyber Detection Expert to serve as the highest technical authority for threat detection across a global environment.

This strategic and hands-on role defines detection landscapes, shapes engineering standards, and translates threat intelligence into scalable production detections, spanning endpoints, identities, cloud, and network.) The role sits at the intersection of Threat Intelligence, Threat Hunting, and Security Operations,

Formación

• Extensive experience in Detection Engineering, Cyber Defense, Security Monitoring, or Threat Detection within complex enterprise environments.

Responsabilidades

• Define and maintain the strategic detection landscape, ensuring coverage remains aligned with evolving threats, adversary behaviors, and business risks.

Conocimientos

Detection Engineering

Cyber Defense

Security Monitoring

Threat Detection

MITRE ATT&CK

Threat Intelligence

Threat Hunting

Automation

AI Assisted Security

Herramientas

Google SecOps

SIEM

Descripción del empleo

About The Job

At the Allianz Cyber Defense Center (ACDC), we are transforming cyber defense into an intelligence-driven, proactive capability. As our Senior Cyber Detection Expert, you will be the highest technical authority for threat detection, shaping how Allianz detects and responds to cyber threats across a global environment.

About The Job

At the Allianz Cyber Defense Center (ACDC), we are transforming cyber defense into an intelligence-driven, proactive capability. As our Senior Cyber Detection Expert, you will be the highest technical authority for threat detection, shaping how Allianz detects and responds to cyber threats across a global environment.

This is a strategic and hands‑on role where you will define the target detection landscape, influence detection engineering standards, and transform threat intelligence and hunting insights into scalable detection coverage. Working at the intersection of Threat Intelligence, Threat Hunting, Security Operations, and Engineering, you will directly impact the security posture of one of the world’s largest financial services organizations.

What You Do

• Define and maintain the strategic detection landscape, ensuring coverage remains aligned with evolving threats, adversary behaviors, and business risks.
• Act as the senior technical authority for detection engineering, setting standards, methodologies, and best practices across the Detection Cluster.
• Lead the design and optimization of advanced SIEM detection use cases, balancing effectiveness, performance, and operational sustainability.
• Own detection coverage assessments and gap analyses, leveraging frameworks such as MITRE ATT&CK and threat intelligence insights.
• Maintain oversight of the security telemetry landscape, identifying critical data gaps and driving the onboarding of new data sources.
• Translate threat intelligence, threat hunting findings, and adversary simulation results into high-quality production detections.
• Design and implement multi-domain detection strategies spanning endpoint, identity, cloud, network, and application security environments.

What You Bring

• Extensive experience in Detection Engineering, Cyber Defense, Security Monitoring, or Threat Detection within complex enterprise environments.
• Deep expertise in SIEM technologies, including log management, event correlation, detection logic development, and security data analysis.
• Strong understanding of adversary tactics, techniques, and procedures (TTPs), with hands‑on knowledge of frameworks such as MITRE ATT&CK.
• Proven experience developing, tuning, and maintaining detection content while minimizing false positives and alert fatigue.
• Experience translating threat intelligence and threat hunting outcomes into actionable and scalable detection capabilities.
• Strong analytical, problem‑solving, and communication skills, with the ability to influence both technical teams and senior stakeholders.
• Familiarity with modern detection engineering practices such as Detection-as-Code, behavioral analytics, automation, and AI‑assisted security operations.

Nice to have

• Experience with Google SecOps.
• Background in Threat Hunting, Threat Intelligence, Purple Teaming, or Adversary Simulation.
• Relevant certifications such as CISSP, GCIH, GCDA, GCFA, or equivalent.
• Experience working in large international or regulated environments.

What We Offer

• We offer a hybrid work model which recognizes the value of striking a balance between in‑person collaboration and remote working incl. up to 25 days per year working from abroad.
• We believe in rewarding performance and our compensation and benefits package includes a company bonus scheme, pension, employee shares program and multiple employee discounts (details vary by location).
• From career development and digital learning programs to international career mobility, we offer lifelong learning for our employees worldwide and an environment where innovation, delivery and empowerment are fostered.
• Flexible working, health and wellbeing offers (including healthcare and parental leave benefits) support to balance family and career and help our people return from career breaks with experience that nothing else can teach.

About Allianz Technology

With its headquarters in Munich, Germany, Allianz Technology is Allianz's global IT service provider and delivers IT solutions that drive the group's digitalization. With more than 11,000 employees in over 20 countries around the world, Allianz Technology is tasked to run, optimize, transform, and innovate the infrastructure, applications, and services together with Allianz companies to co‑create the best customer experience.

We service the entire spectrum of digitalization – from one of the industry's largest IT infrastructure projects that spans data centres, networks, and security, to application platforms ranging from workplace services to digital interaction.

In short: We deliver comprehensive end‑to‑end IT solutions for Allianz in the digital age. We are the backbone of Allianz.

Find us at: www.linkedin.com/company/allianz-technology.

Commitment to Integrity, Fairness & Inclusion

Allianz Technology is proud to be an equal opportunity employer dedicated to fostering an inclusive work environment for everyone. We embrace individuals of all gender identities and expressions, sexual orientations, ethnicities, ages, nationalities, religions, disabilities, and philosophies of life. Ultimately, our greatest strength as a company lies in the unique skills, experiences, and backgrounds our employees contribute.

We therefore welcome applications regardless of race, ethnicity or cultural background, age, gender, nationality, religion, social class, disability or sexual orientation, or any other characteristics protected under applicable local laws and regulations.

To Recruitment Agencies

Allianz Technology has an in‑house recruitment team that sources great candidates directly. Therefore, Allianz Technology does not accept unsolicited resumes from agencies or search firm recruiters.

When we do work with recruitment agencies, that engagement is formalized by a contract. Fees will only be paid when there is a contract in place. Without a contract in place, we will not accept invoices on unsolicited resumes, even if the candidate was ultimately employed by Allianz.

102804 | Ingeniería informática y tecnológica | Profesional / Senior | Non-Executive | Allianz Technology | Jornada completa | Indefinido