Cyber Detection Engineer - Use Case Specialist

sunlife; Ireland; On-site; EUR 70,000 - 120,000; Full time

Job summary

Sun Life is seeking a Cyber Use Case Developer to design, implement, and improve security monitoring use cases across SIEM, EDR, XDR, cloud, and network data sources. You will translate attacker techniques into practical detection logic and high‑fidelity alerts, coordinating with Security Operations, Threat Hunting, and Incident Response teams.

Responsibilities include developing detections for network threats, maintaining lifecycle documentation, and ensuring alerts support timely investigation

Qualifications

• Post‑secondary education in Cyber Security, Information Technology, Computer Science, Information Systems, or equivalent practical experience.
• Experience in security operations, detection engineering, threat hunting, incident response, cyber threat intelligence, network operations or a related cyber security function.
• Hands‑on experience working with network security tools and telemetry, including firewalls, proxies, DNS logs, DHCP logs, VPN platforms, IDS/IPS, NAC, packet capture, or similar technologies.
• Experience writing detection logic or search queries using SPL, KQL, SQL, Sigma, YARA, Python, PowerShell, or similar.
• Strong understanding of network security concepts, common attacker techniques and defensive controls.

Responsibilities

• Develop, enhance, and maintain cyber security detection use cases across SIEM, EDR, XDR, cloud, identity, endpoint, and network security data sources.
• Translate adversary tactics, techniques, and procedures into practical detection logic aligned to MITRE ATT&CK.
• Map detection use cases to MITRE ATT&CK framework for comprehensive adversary coverage.
• Write, test, and tune detection rules, search queries, analytics, and alert logic.
• Perform use case lifecycle management: requirements, design, development, validation, deployment, tuning, and review.
• Collaborate with network security and engineering teams to understand architecture and logging requirements.

Skills

Threat detection

Analytical thinking

Team collaboration

Education

Post-secondary education in Cyber Security or related field

Tools

SPL

KQL

SQL

Sigma

YARA

Python

PowerShell

Firewall

Proxy

Job description

Sun Life is seeking a Cyber Use Case Developer to design, implement, and improve security monitoring use cases across SIEM, EDR, XDR, cloud, and network data sources. You will translate attacker techniques into practical detection logic and high‑fidelity alerts, coordinating with Security Operations, Threat Hunting, and Incident Response teams.

Responsibilities include developing detections for network threats, maintaining lifecycle documentation, and ensuring alerts support timely investigation