Threat Detection Engineer — SOAR & Automation Focus

ADP, Inc.; Barcelona; Presencial; EUR 70.000 - 110.000; Jornada completa

Descripción de la vacante

ADP is hiring a Threat Detection Engineer to join our Global Security team. You will design and implement detection capabilities across SOAR, EDR, and SIEM, collaborating with CIRC, Threat Intelligence, and Threat Hunting to protect ADP assets.

You should be proficient in Python and SQL, understand API integrations, and translate threat intelligence into practical detections. This role offers a hybrid arrangement and opportunities to influence security workflows.

Formación

• 2+ years of experience in threat detection or threat hunting.
• Strong analytical skills and cross-functional knowledge across multiple security disciplines.
• Strong interpersonal, verbal presentation, and written communication skills.
• Strong knowledge and working experience with databases and data warehouse technologies and solutions.
• Strong working experience with systems automation in a major scripting language (Python, PowerShell).
• Strong experience building detection logic utilizing security logs to detect malicious activity with high fidelity across a broad set of detection use cases.
• Strong project/program management experience.
• Working experience with one or more cloud providers, such as Amazon Web Services or Microsoft Azure.
• Familiar with interpreting the log output of network and host device classes.
• Functional experience with XML, HTML, Regular Expressions, JSON, REST, SQL.
• Packet-level behavioral familiarity with major TCP/IP protocols.
• Experience working with SIEM and SOAR.
• Creative thinker with innovative problem-solving.
• Ability to communicate security concepts to a broad audience.
• High integrity and ability to work independently.

Responsabilidades

• Develop advanced alerting capabilities based on threat intelligence and incident findings.
• Maintain expert understanding of attacks, vectors, and emergent threats.
• Develop new detection for our SOAR platform based on stakeholder requests.
• Collaborate with CIRC and threat management to understand requirements.
• Experience with creating and implementing content in EDR, NDR, and SOAR.
• Stay updated with threats and integrate knowledge into new detections.
• Contribute to SOPs and playbooks.
• Provide content for reports, configuration guides, and training materials.
• Work with CIRC, threat management, and engineering to improve detections.
• Analyze alert stats to reduce false positives and focus engineering efforts.
• Provide design support to improve detection and response capabilities.
• Provide backup support to CIRC when needed.
• Mature CIRC playbooks, workflows, and use cases.

Conocimientos

Threat detection

Threat hunting

Python

PowerShell

SIEM

SOAR

Cloud (AWS/Azure)

Data warehouse

SQL

XML/HTML/JSON/REST/SQL

Herramientas

SQL

XML

JSON

REST

Descripción del empleo

ADP is hiring a Threat Detection Engineer to join our Global Security team. You will design and implement detection capabilities across SOAR, EDR, and SIEM, collaborating with CIRC, Threat Intelligence, and Threat Hunting to protect ADP assets.

You should be proficient in Python and SQL, understand API integrations, and translate threat intelligence into practical detections. This role offers a hybrid arrangement and opportunities to influence security workflows.