Detection Engineer — Custom Threat Detections (Remote)

NCC Group; Netherlands; Remote; EUR 60,000 - 90,000; Full time

Benefits offered by this job

Flexible working hours

Pension scheme

26 vacation days

Fox Academy development

Laptop provided

Remote work allowance

Bonus & profit sharing

Office lunch

Job summary

NCC Group is seeking a Detection Engineer to join the Global Detection Engineering Team in the Netherlands, based in Rijswijk. You will tailor detections for customers, leveraging NCC’s detection library while developing custom detections to match customer needs.

You will work at the intersection of customers and detection engineers, assessing gaps and translating requirements into actionable detections within our detections repository.

Qualifications

• Experience in detection engineering on SIEM/EDR platforms.
• Background in SOC or MDAS environments.
• Strong written and spoken communication skills.
• Ability to collaborate with client teams and NCC colleagues to improve service.

Responsibilities

• Schedule and run threat workshops using industry methodologies.
• Correlate SIEM events with business/app activity.
• Query data in SIEM environments to assess feasibility of detections.
• Write pseudo-logic for detections and track status in ticketing systems.

Skills

Detection engineering

SOC or Managed Detection

IT Systems/Network Admin

Communication skills

Client engagement

Security fundamentals

Tools

SIEM

EDR

Job description

NCC Group is seeking a Detection Engineer to join the Global Detection Engineering Team in the Netherlands, based in Rijswijk. You will tailor detections for customers, leveraging NCC’s detection library while developing custom detections to match customer needs.

You will work at the intersection of customers and detection engineers, assessing gaps and translating requirements into actionable detections within our detections repository.