Rule Detection Engineer - SOC

DNV; Espoo; Presencial; EUR 60.000 - 90.000; Jornada completa

Descripción de la vacante

DNV Cyber is seeking a Detection Engineer to develop and implement advanced detection capabilities for SIEM and XDR, including logic-based and ML-based rules. You will contribute to SOC operations and tool development to improve client security postures.

You will work with Microsoft Sentinel, Splunk and other SIEM/XDR technologies, apply data engineering concepts, and write queries in Python or KQL. Excellent communication and English are essential.

Formación

• Experience with SIEM and XDR technologies such as Microsoft security stack.
• Strong customer communication skills to deliver cyber security value.
• Experience with at least one scripting or programming language (Python or PowerShell) and/or queries (KQL).
• Fluent English.

Responsabilidades

• Develop and implement advanced detection capabilities to bolster client security defenses, including logic-based and ML-based rules for SIEM/XDR.
• Contribute to SOC operations by developing tools and automated solutions to improve efficacy.

Conocimientos

Customer communication

SIEM/XDR experience

Python

KQL

Powershell

English fluency

Herramientas

Microsoft Sentinel

Splunk

XDR platforms

Descripción del empleo

About Us

We are the independent expert in assurance and risk management. Driven by our purpose, to safeguard life, property, and the environment, we empower our customers and their stakeholders with facts and reliable insights so that critical decisions can be made with confidence.

We are the independent expert in assurance and risk management. Driven by our purpose, to safeguard life, property, and the environment, we empower our customers and their stakeholders with facts and reliable insights so that critical decisions can be made with confidence. As a trusted voice for many of the world’s most successful organizations, we use our knowledge to advance safety and performance, set industry benchmarks, and inspire and invent solutions to tackle global transformations.

About The Role

Are you ready to dive into the world of cybersecurity with a dynamic and impactful role? Join our Customer Delivery Unit team within Security Operations!

DNV Cyber is a leading cybersecurity services provider, formed by merging Nixu, Applied Risk and DNV in 2024. At DNV Cyber we take pride in safeguarding what’s critical to our customers and all of us as individuals – from personal data to industrial safety systems. We use our expertise and scale to tackle the most difficult cyber issues in multiple industries that are critical to society.

The role in short

As a Detection Engineer, your primary responsibility will be developing and implementing advanced detection capabilities to bolster our clients' security defenses, for example by creating both logic-based and more sophisticated ML-based detection rules for Security Information and Event Management (SIEM) and Extended detection and response (XDR) products. Furthermore, you will participate in developing innovative tools and automated solutions to enhance the effectiveness of our SOC operations.

What We're Looking For

We are seeking a talented individual with previous experience working with security tools such as Microsoft Sentinel and XDR, Splunk, or similar technologies. Your experience is complemented by proficient skills in programming and query languages (e.g. Python and/or KQL). You will be working as part of a team of security professionals with the purpose of delivering high-end services to our clients. This requires customer communication and understanding on how to provide value in cyber security to our clients. Of course, a genuine passion for the cybersecurity field and an eagerness to learn are essential. We recognize your potential in specific areas that align with your expertise and contribute significantly to the team's success.

What we offer

At DNV Cyber, we are passionate about cybersecurity and take pride in the way we are impacting the society we live in. We encourage you to excel professionally through knowledge sharing and demanding cases. At DNV Cyber, you'll have 500 colleagues who share an interest in cyber security with you. With us, you will be surrounded by the most talented people in the cybersecurity field.

Join us on an exciting adventure of growth, meaningful work, and shaping the future through cybersecurity!

Visit our website to get to know more about us!

DNV is an Equal Opportunity Employer and gives consideration for employment to qualified applicants without regard to gender, religion, race, national or ethnic origin, cultural background, social group, disability, sexual orientation, gender identity, marital status, age or political opinion. Diversity is fundamental to our culture and we invite you to be part of this diversity.

About You

You have the following

• Customer communication skills with ability to create customer value in the area of cyber security
• Experience with SIEM and XDR technologies such as Microsoft security stack. Experience with other similar SIEM and/or XDR systems is appreciated too
• Exposure to data engineering concepts (e.g. data collection, data lakes, ETLs, ML Ops, etc.) is appreciated
• Experience with at least one scripting and programming language (e.g. Python or Powershell) and/or experience in writing queries with a query language (e.g. KQL)
• Genuine Passion for Cybersecurity: While previous experience in cybersecurity is not mandatory, the candidate must demonstrate a genuine passion for the field and a strong interest in staying up to date with the latest trends and emerging threats
• Innovative Problem-Solving Skills, Adaptability and Collaboration is appreciated
• Fluent skills in English

Desired But Not Required

• Experience with Git-based CI/CD pipelines, IaC (Infrastructure as Code), and DaC (Detection as Code)
• Experience in working in or in cooperation with a Security Operation Center (SOC)

Security and compliance with statutory requirements in the countries in which we operate is essential for DNV. Background checks will be conducted on all final candidates as part of the offer process, in accordance with applicable country-specific laws and practices.