Senior Cyber Detection Engineer - Use Case Lead

Sun Life Financial; Waterford; On-site; EUR 62,000 - 93,000; Full time

Job summary

Sun Life Financial in Ireland seeks a Senior Cyber Use Case Developer to lead design, development, testing and ongoing improvement of advanced security monitoring detections across SIEM, EDR, XDR, cloud, identity and endpoints. You will translate attacker techniques and threat intelligence into high‑fidelity detection logic and guide multiple teams in detection engineering.

As a technical lead, you’ll standardize use-case lifecycles, reduce false positives, measure performance with metrics, and

Qualifications

• 5+ years in security operations, detection engineering, threat hunting, incident response or related cyber security function.
• Experience leading or contributing to detection use case development and SIEM content engineering.
• Hands-on with SIEM, EDR, XDR, cloud security, identity, network, endpoint and application telemetry.
• Strong knowledge of MITRE ATT&CK, Cyber Kill Chain, NIST and CIS Controls.
• Proven ability to mentor peers, communicate strategies to technical and non-technical audiences.

Responsibilities

• Lead the development and lifecycle management of detection use cases across SIEM/EDR/XDR and cloud telemetry.
• Translate threat intel and adversary tactics into scalable detection logic.
• Design, test, tune, and peer review correlation rules, queries, analytics and alert logic.
• Establish use case development standards and validation processes.
• Drive false-positive reduction through tuning and enrichment.
• Mentor the team and share knowledge through training and reviews.
• Measure performance using metrics like alert volume, precision, and MTTD.

Skills

Threat detection

Threat hunting

Incident response

Detection engineering

Mentoring

Education

Post-secondary education in Cyber Security/IT/CS, or equivalent experience

Tools

SIEM

EDR

XDR

Cloud security

MITRE ATT&CK

KQL/Python

Job description

Sun Life Financial in Ireland seeks a Senior Cyber Use Case Developer to lead design, development, testing and ongoing improvement of advanced security monitoring detections across SIEM, EDR, XDR, cloud, identity and endpoints. You will translate attacker techniques and threat intelligence into high‑fidelity detection logic and guide multiple teams in detection engineering.

As a technical lead, you’ll standardize use-case lifecycles, reduce false positives, measure performance with metrics, and