Senior Detection Engineer

Allianz; Italia; Ibrido; EUR 110.000 - 150.000; Tempo pieno

Vantaggi offerti da questo lavoro

Hybrid work

Bonus scheme

Pension

Employee shares program

Healthcare

Descrizione del lavoro

Allianz Technology, headquartered in Munich, seeks a Senior Detection Engineer to shape threat detection across a global environment and drive standards for detection engineering. You will translate threat intel into scalable detections and collaborate across Threat Intelligence, Hunters, SOC, and Engineering teams.

You will own multi-domain detection strategies spanning endpoints, identity, cloud, network, and applications, balancing effectiveness, performance, and sustainability.

Competenze

• Extensive experience in Detection Engineering, Cyber Defense, Security Monitoring, or Threat Detection within complex enterprise environments.
• Deep expertise in SIEM technologies, including log management, event correlation, detection logic development, and security data analysis.
• Strong understanding of adversary tactics, techniques, and procedures (TTPs), with hands-on knowledge of MITRE ATT&CK.
• Proven experience developing, tuning, and maintaining detection content while minimizing false positives and alert fatigue.
• Experience translating threat intelligence and threat hunting outcomes into actionable and scalable detection capabilities.
• Strong analytical, problem-solving, and communication skills, with the ability to influence both technical teams and senior stakeholders.
• Familiarity with modern detection engineering practices such as Detection-as-Code, behavioral analytics, automation, and AI-assisted security operations.

Mansioni

• Define and maintain the strategic detection landscape, ensuring coverage remains aligned with evolving threats, adversary behaviors, and business risks.
• Act as the senior technical authority for detection engineering, setting standards, methodologies, and best practices across the Detection Cluster.
• Lead the design and optimization of advanced SIEM detection use cases, balancing effectiveness, performance, and operational sustainability.
• Own detection coverage assessments and gap analyses, leveraging frameworks such as MITRE ATT&CK and threat intelligence insights.
• Maintain oversight of the security telemetry landscape, identifying critical data gaps and driving the onboarding of new data sources.
• Translate threat intelligence, threat hunting findings, and adversary simulation results into high-quality production detections.
• Design and implement multi-domain detection strategies spanning endpoint, identity, cloud, network, and application security environments.

Conoscenze

Detection Engineering

Cyber Defense

SIEM technologies

MITRE ATT&CK

Threat Intelligence

Threat Hunting

Automation

Strumenti

SIEM platforms

Descrizione del lavoro

Senior Detection Engineer

Azienda : Allianz Tipo Lavoro : Full Time Italy

Descrizione Lavoro - Senior Detection Engineer

About the Job

At the Allianz Cyber Defense Center (ACDC), we are transforming cyber defense into an intelligence-driven, proactive capability. As our Senior Cyber Detection Expert, you will be the highest technical authority for threat detection, shaping how Allianz detects and responds to cyber threats across a global environment.

This is a strategic and hands-on role where you will define the target detection landscape, influence detection engineering standards, and transform threat intelligence and hunting insights into scalable detection coverage. Working at the intersection of Threat Intelligence, Threat Hunting, Security Operations, and Engineering, you will directly impact the security posture of one of the world's largest financial services organizations.

What You Do

• Define and maintain the strategic detection landscape, ensuring coverage remains aligned with evolving threats, adversary behaviors, and business risks.


• Act as the senior technical authority for detection engineering, setting standards, methodologies, and best practices across the Detection Cluster.


• Lead the design and optimization of advanced SIEM detection use cases, balancing effectiveness, performance, and operational sustainability.


• Own detection coverage assessments and gap analyses, leveraging frameworks such as MITRE ATT&CK and threat intelligence insights.


• Maintain oversight of the security telemetry landscape, identifying critical data gaps and driving the onboarding of new data sources.


• Translate threat intelligence, threat hunting findings, and adversary simulation results into high-quality production detections.


• Design and implement multi-domain detection strategies spanning endpoint, identity, cloud, network, and application security environments.

What You Bring

• Extensive experience in Detection Engineering, Cyber Defense, Security Monitoring, or Threat Detection within complex enterprise environments.


• Deep expertise in SIEM technologies, including log management, event correlation, detection logic development, and security data analysis.


• Strong understanding of adversary tactics, techniques, and procedures (TTPs), with hands-on knowledge of frameworks such as MITRE ATT&CK.


• Proven experience developing, tuning, and maintaining detection content while minimizing false positives and alert fatigue.


• Experience translating threat intelligence and threat hunting outcomes into actionable and scalable detection capabilities.


• Strong analytical, problem-solving, and communication skills, with the ability to influence both technical teams and senior stakeholders.


• Familiarity with modern detection engineering practices such as Detection-as-Code, behavioral analytics, automation, and AI-assisted security operations.

Nice to have

• Experience with Google SecOps.


• Background in Threat Hunting, Threat Intelligence, Purple Teaming, or Adversary Simulation.


• Relevant certifications such as CISSP, GCIH, GCDA, GCFA, or equivalent.


• Experience working in large international or regulated environments.

What we offer

• We offer a hybrid work model which recognizes the value of striking a balance between in-person collaboration and remote working incl. up to 25 days per year working from abroad.


• We believe in rewarding performance and our compensation and benefits package includes a company bonus scheme, pension, employee shares program and multiple employee discounts (details vary by location).


• From career development and digital learning programs to international career mobility, we offer lifelong learning for our employees worldwide and an environment where innovation, delivery and empowerment are fostered.


• Flexible working, health and wellbeing offers (including healthcare and parental leave benefits) support to balance family and career andhelp our people return from career breaks with experience that nothing else can teach.

About Allianz Technology

With its headquarters in Munich, Germany, Allianz Technology is Allianz's global IT service provider and delivers IT solutions that drive the group's digitalization. With more than 11,000 employees in over 20 countries around the world, Allianz Technology is tasked to run, optimize, transform and innovate the infrastructure, applications and services together with Allianz companies to co-create the best customer experience.

We service the entire spectrum of digitalization – from one of the industry's largest IT infrastructure projects that spans data centres, networks and security, to application platforms ranging from workplace services to digital interaction.

In short: We deliver comprehensive end-to-end IT solutions for Allianz in the digital age. We are the backbone of Allianz.

Commitment to Integrity, Fairness & Inclusion

Allianz Group is one of the most trusted insurance and asset management companies in the world. Caring for our employees, their ambitions, dreams and challenges, is what makes us a unique employer. Together we can build an environment where everyone feels empowered and has the confidence to explore, to grow and to shape a better future for our customers and the world around us.

We at Allianz believe in a strong inclusive culture that encourages people to speak their minds, get involved and question the status quo. We are proud to be an equal opportunity employer and encourage you to bring your whole self to work, no matter where you are from, what you look like, who you love, or what you believe in. We therefore welcome applications regardless of race, ethnicity or cultural background, age, gender, nationality, religion, social class, disability, sexual orientation, or any other characteristics protected under applicable local laws and regulations.

To Recruitment Agencies

Allianz Technology has an in-house recruitment team that sources great candidates directly. Therefore, Allianz Technology does not accept unsolicited resumes from agencies or search firm recruiters.

When we do work with recruitment agencies, that engagement is formalized by a contract. Fees will only be paid when there is a contract in place. Without a contract in place, we will not accept invoices on unsolicited resumes, even if the candidate was ultimately employed by Allianz.