Senior Cyber Detection Use-Case Architect

Sun Life; Waterford; On-site; EUR 62,000 - 93,000; Full time

Job summary

Sun Life in Ireland seeks a Senior Cyber Use Case Developer to lead design, development, testing and ongoing improvement of advanced security detection use cases across SIEM, EDR, XDR, cloud, identity, and network telemetry sources.

You will translate adversary behaviours and business risk into high-fidelity detection logic, collaborate with Threat Hunting and Threat Intelligence, and drive improvements in coverage, accuracy and lifecycle practices to mitigate threats.

Qualifications

• 5+ years of experience in security operations, detection engineering, threat hunting, incident response, or related cyber security roles.
• Experience leading detection use case development and SIEM content engineering in an enterprise environment.
• Strong knowledge of MITRE ATT&CK, threat-informed defence, and alert tuning.

Responsibilities

• Lead the development, enhancement, and lifecycle management of cyber security detection use cases across SIEM, EDR, XDR, cloud, identity, network, endpoint, and application telemetry sources.
• Translate adversary tactics, techniques, procedures, and threat intelligence into scalable, high-fidelity detection logic aligned to MITRE ATT&CK.
• Design, write, test, tune, and peer review advanced correlation rules, search queries, analytics, dashboards, and alert logic.
• Establish and maintain use case development standards, including intake, prioritization, design documentation, validation, deployment readiness, tuning, and retirement criteria.
• Assess telemetry coverage, data quality, parsing, normalization, and logging gaps; partner with engineering to improve data source reliability and detection readiness.
• Lead gap assessments and coverage mapping for priority threat scenarios and emerging threat behaviours.
• Partner with Threat Hunting and Threat Intelligence to operationalize intelligence into durable monitoring content.
• Drive false-positive reduction and alert quality improvements through tuning, enrichment, and suppression logic.
• Support purple team and breach emulation exercises to test and improve detection coverage.
• Measure use case performance via metrics like alert volume, precision, and mean time to detect.

Skills

Detection engineering

SIEM

Threat hunting

Incident response

Python

KQL

SQL

MITRE ATT&CK

Threat intelligence

Mentoring

Education

Post-secondary degree in Cyber Security or related field

Tools

Splunk

Cloud security platforms

PowerShell

Job description

Sun Life in Ireland seeks a Senior Cyber Use Case Developer to lead design, development, testing and ongoing improvement of advanced security detection use cases across SIEM, EDR, XDR, cloud, identity, and network telemetry sources.

You will translate adversary behaviours and business risk into high-fidelity detection logic, collaborate with Threat Hunting and Threat Intelligence, and drive improvements in coverage, accuracy and lifecycle practices to mitigate threats.