Threat Detection Engineer: SOAR, Threat Intel & Automation

adpinternalcareers; España; Híbrido; EUR 60.000 - 90.000; Jornada completa

Descripción de la vacante

ADP is seeking a Threat Detection Engineer to join our Global Security organization. You will collaborate with CIRC, Threat Intelligence, Threat Hunting, Red Team, and AppDev to design and drive threat detection, prevention, and response capabilities.

You will lead and contribute to the creation of detection content across EDR, NDR, and SOAR, leveraging threat intelligence and incident findings to reduce false positives and improve detection quality.

Formación

• 2+ years of threat detection or threat hunting experience.
• Strong analytical and cross-functional knowledge.
• Experience with databases and data warehousing.
• Experience with Python or PowerShell scripting.
• Experience with SIEM and SOAR.
• Ability to communicate security concepts to technical and non-technical staff.

Responsabilidades

• Develop threat detection and monitoring capabilities.
• Maintain expert knowledge of attacks, vectors, and threats.
• Create detections for SOAR platform from stakeholders' requests.
• Collaborate with CIRC and threat management to define needs.
• Provide content for SOPs, reports, and training materials.
• Improve detection and response capabilities with engineering teams.
• Reduce false positives by analyzing alert statistics.
• Build detections using security logs across multiple platforms.

Conocimientos

Threat detection

Threat hunting

Analytical skills

Cross-functional knowledge

Communication skills

Project management

Herramientas

SIEM

SOAR

EDR

NDR

Cloud platforms

Data warehouses

Python

PowerShell

Descripción del empleo

ADP is seeking a Threat Detection Engineer to join our Global Security organization. You will collaborate with CIRC, Threat Intelligence, Threat Hunting, Red Team, and AppDev to design and drive threat detection, prevention, and response capabilities.

You will lead and contribute to the creation of detection content across EDR, NDR, and SOAR, leveraging threat intelligence and incident findings to reduce false positives and improve detection quality.