Detection Engineer - Custom Detections & SIEM Expertise

NCC Group; Rijswijk; Hybrid; EUR 70,000 - 100,000; Full time

Benefits offered by this job

Flexible working hours

Remote work allowance

Laptop and business phone

Pension scheme

26 vacation days + 4 days off

Job summary

NCC Group in Rijswijk, NL is seeking a Detection Engineer to join our Global Detection Engineering Team. You will tailor detections for our 24/7 managed monitoring service, bridging customers and detection engineers to define gaps and build custom detections beyond NCC’s library.

You will work with SIEM/EDR technologies, engage with customers, and contribute to expanding our detection library while ensuring effective delivery and testing of new analytics.

Qualifications

• Experience in detection engineering on SIEM/EDR
• SOC or Managed Detection Services experience preferred
• Analytically-minded IT systems/network administration background an asset
• Excellent written and spoken communication skills

Responsibilities

• Schedule and host threat workshops using approved methodologies
• Correlate log events in SIEM to application/tech activities
• Query data in SIEM environments to assess detection feasibility
• Write pseudo-logic and work packages for detections-as-code
• Derive new detection opportunities from threat intelligence reports
• Identify potential abuse patterns in customer applications
• Explain attack paths to customers
• Track detections in development and share status with customers
• Obtain customer feedback during testing of new analytics
• Ensure work is tracked in internal ticketing systems

Skills

Detection engineering

SIEM

EDR

SOC experience

Tools

Splunk

Microsoft Sentinel

Job description

NCC Group in Rijswijk, NL is seeking a Detection Engineer to join our Global Detection Engineering Team. You will tailor detections for our 24/7 managed monitoring service, bridging customers and detection engineers to define gaps and build custom detections beyond NCC’s library.

You will work with SIEM/EDR technologies, engage with customers, and contribute to expanding our detection library while ensuring effective delivery and testing of new analytics.