Threat Detection Engineer - Hybrid (Cloud & On-Prem)

SMBC Group; Ireland; Hybrid; EUR 75,000 - 110,000; Full time

Benefits offered by this job

Hybrid work model

Disability accommodations

Job summary

SMBC Group is seeking a Cyber Security Engineer, Threat Detection to join the Security Operations team. You will design and tune threat detections across cloud and on‑prem environments, build robust data pipelines, and work with analysts and threat intelligence to improve monitoring and response.

The role requires 3+ years in cybersecurity or SOC fields, experience with cloud SIEM, EDR, SOAR, and data lakes, and the ability to translate threat intel into practical detections.

Qualifications

• Minimum of 3 years in cybersecurity, detection engineering, SOC, or security analytics.
• Hands-on experience analyzing logs from endpoint, network, cloud, and infrastructure sources.
• Experience with cloud SIEM, UEBA, EDR, SOAR, data lake, or related technologies.
• Strong ability to translate threat intelligence into practical detections and monitoring use cases.
• Experience mapping detections to MITRE ATT&CK or similar frameworks.

Responsibilities

• Design, tune, and maintain threat detection logic across cloud and on‑prem environments.
• Build and maintain data ingestion pipelines for security telemetry.
• Collaborate with threat intel, analysts, and engineers to validate coverage.
• Develop detection rules, correlations, and alerting thresholds to reduce false positives.
• Document detection logic, data sources, and operational procedures.
• Align detection engineering with compliance and regulatory requirements.

Skills

Detection engineering

Security analytics

Threat detection

MITRE ATT&CK mapping

Analytical thinking

Tools

Cloud SIEM

UEBA

EDR

SOAR

Data lake

Job description

SMBC Group is seeking a Cyber Security Engineer, Threat Detection to join the Security Operations team. You will design and tune threat detections across cloud and on‑prem environments, build robust data pipelines, and work with analysts and threat intelligence to improve monitoring and response.

The role requires 3+ years in cybersecurity or SOC fields, experience with cloud SIEM, EDR, SOAR, and data lakes, and the ability to translate threat intel into practical detections.