Senior Detection Research Engineer

Cloud Protection by WithSecure; Helsinki; On-site; EUR 90,000 - 150,000; Full time

Benefits offered by this job

Flexible work options

Up to 30 days per year working abroad

Paid sick leave from day one

Well-being focus and mental health/ass

Learning and development opportunities

Job summary

Cloud Protection is hiring a Senior Detection Research Engineer to join our Threat Intelligence team in Helsinki. You’ll research threats targeting Salesforce environments, then translate findings into detection logic that protects customers.

You’ll influence how we write, test, and evaluate detections as protection capabilities evolve. This senior individual contributor role involves hands-on work and close collaboration with product and engineering teams to continuously enhance protection

Qualifications

• 7+ years of experience in detection engineering, threat research, malware analysis or a related security role.
• Strong understanding of malware, phishing, URL-based threats and adversary techniques.
• Hands-on experience designing, testing and tuning detections, including investigating false positives and missed detections.
• Experience assessing detection technologies or intelligence sources using representative data and clear performance measures.
• Experience working with engineering and product teams to turn security research into protection improvements.
• Ability to explain technical findings and recommendations clearly to both technical and non-technical audiences.
• Familiarity with Salesforce, SaaS or cloud security is a strong plus.

Responsibilities

• Research malware, phishing, and adversary techniques including emerging threats involving AI that target Salesforce and SaaS environments, and translate findings into detection requirements.
• Analyze telemetry, investigate false positives and missed detections, and use the findings to improve existing detections.
• Design detection logic and workflows that combine metadata, threat signals and analysis results to make reliable protection decisions.
• Explore new technologies and detection approaches, test promising ideas quickly, and turn what works into practical improvements to protection.
• Work with detection technology and threat intelligence partners to assess accuracy, latency and contribution to protection.
• Identify missing protection capabilities and work with product and engineering teams to define and prioritize improvements.

Skills

Detection engineering

Threat research

Malware analysis

Detections design & testing

Communication

Cloud security familiarity

Job description

Cloud Protection protects Fortune 500 enterprises and government organizations worldwide from malware, phishing, and identity-based attacks in Salesforce. Our work builds on more than 30 years of experience in analyzing malware and defending against advanced threats — expertise few security companies can match.

It’s our people who make that possible. Newly independent after years as WithSecure’s most autonomous business unit, we combine the focus and speed of a startup with decades of cybersecurity depth. We’re a diverse team that values passion, purpose, and genuine wellbeing at work, and we’re looking for people who want to set the standard for Salesforce security with us.

We’re looking for a Senior Detection Research Engineer to join our Threat Intelligence team. You’ll research threats targeting Salesforce environments, then turn what you learn into detection logic that protects customers. You’ll also help shape how we write, test, and evaluate detections as our protection capabilities evolve.

This is a senior individual contributor role with substantial hands-on work and close collaboration with product and engineering teams.

Key Responsibilities

• Research malware, phishing, and adversary techniques including emerging threats involving AI that target Salesforce and SaaS environments, and translate findings into detection requirements.

• Analyze telemetry, investigate false positives and missed detections, and use the findings to improve existing detections.

• Design detection logic and workflows that combine metadata, threat signals and analysis results to make reliable protection decisions.

• Explore new technologies and detection approaches, test promising ideas quickly, and turn what works into practical improvements to protection.

• Work with detection technology and threat intelligence partners to assess accuracy, latency and contribution to protection.

• Identify missing protection capabilities and work with product and engineering teams to define and prioritize improvements.

What are we looking for?

• 7+ years of experience in detection engineering, threat research, malware analysis or a related security role.

• Strong understanding of malware, phishing, URL-based threats and adversary techniques.

• Hands-on experience designing, testing and tuning detections, including investigating false positives and missed detections.

• Experience assessing detection technologies or intelligence sources using representative data and clear performance measures.

• Experience working with engineering and product teams to turn security research into protection improvements.

• Ability to explain technical findings and recommendations clearly to both technical and non-technical audiences.

• Familiarity with Salesforce, SaaS or cloud security is a strong plus.

The salary displayed on this page represents the estimate for the role. Final compensation is discussed individually and depends on experience, skills, and the local market and might vary up or down.

What will you get from us

• Meaningful work with real-world impact – your work helps protect businesses and critical infrastructure from modern cyber threats.
• Flexible ways of working, including up to 30 days per year working abroad and paid sick leave from day one.
• A strong focus on well-being, with mental health support and comprehensive benefits.
• Continuous learning, modern tools, and a people-first culture that values trust and collaboration.