Detection Engineer: SIEM, BAS & Threat Intelligence

Philips Iberica SAU; Netherlands; Remote; EUR 61,000 - 102,000; Full time

Benefits offered by this job

Hybrid working

Health & wellbeing benefits

Learning & development

Paid time off

Job summary

Philips is seeking a Detection Engineer to design, implement, and continuously validate high-fidelity detection capabilities within the Cyber Defense Capabilities team. You will develop, test, and tune SIEM detections, perform BAS exercises, and map coverage to MITRE ATT&CK.

You will work with incident responders, threat hunters, and threat intelligence teams to improve detections and reduce MTTD, in a primarily onsite/office environment in the Netherlands.

Qualifications

• Minimum 2 years of experience in areas such as Security Architecture, Network Security, or Information Security.
• Bachelor’s degree in Cybersecurity, Computer Science, or related field.
• Strong experience with SIEM platforms (e.g., Splunk, Sentinel).
• Proficiency in detection engineering, log parsing, and data normalization.
• Familiarity with AI/ML concepts in cybersecurity for threat analysis and automation.

Responsibilities

• Develop, test, and maintain detection rules, signatures, and correlation logic in SIEM and related platforms.
• Conduct regression testing of detection rules to ensure accuracy and resilience after updates.
• Perform breach and attack simulations (BAS) to validate use cases tied to threat intel and TTPs.
• Map detection logic to MITRE ATT&CK and ensure coverage of priority threat scenarios.
• Integrate threat intelligence feeds, IOCs, and behavioral patterns into detection workflows.
• Tune detection logic to reduce false positives and improve alert fidelity.
• Collaborate with incident response and threat hunting teams to address gaps and validate detections.
• Automate enrichment, correlation, and triage via SOAR playbooks and scripts.
• Maintain documentation, repositories, and test playbooks for continuity.
• Contribute to SOC metrics including coverage, false positives, and BAS validation.

Job description

Philips is seeking a Detection Engineer to design, implement, and continuously validate high-fidelity detection capabilities within the Cyber Defense Capabilities team. You will develop, test, and tune SIEM detections, perform BAS exercises, and map coverage to MITRE ATT&CK.

You will work with incident responders, threat hunters, and threat intelligence teams to improve detections and reduce MTTD, in a primarily onsite/office environment in the Netherlands.