MDR Security Engineer

Base Cyber Security; Amsterdam; Presencial; EUR 90.000 - 120.000; Jornada completa

Descripción de la vacante

Base Cyber Security is seeking a Security Engineer focused on Managed Detection & Response (MDR), threat hunting, and detection engineering to strengthen how threats are detected across complex IT environments.

You will work with security data, threat intel, and engineering teams to identify gaps in monitoring, develop detection scenarios, and improve overall detection capabilities. This role emphasizes automation and hands-on investigation.

Formación

• Experience in security engineering or related field.
• Experience with security logs, telemetry or security data sources.
• Understanding of IT infrastructure, networking and OS behavior.
• Ability to distinguish normal from suspicious activity.
• Familiarity with SIEM or log analytics platforms.
• Understanding of threat detection and response principles.
• Analytical approach to security problems.
• Interest in automation and improving security processes at scale.
• Ownership of investigations and improvements.
• Strong written and verbal communication to explain findings.

Responsabilidades

• Develop and improve detection use cases based on threats and observed behaviour.
• Perform proactive threat hunting to identify suspicious activity.
• Analyse security logs and telemetry to investigate potential threats.
• Translate threat scenarios into practical detection approaches.
• Identify gaps in detection coverage and contribute to improvements.
• Refine detections to improve accuracy and relevance.
• Help determine response, escalation, and automation actions when detections trigger.
• Leverage threat intelligence to support detection and hunting activities.
• Contribute to continuous MDR and detection capability improvements.
• Communicate findings to engineers and stakeholders.
• Collaborate with engineering teams to understand system behaviour and validate detection approaches.

Conocimientos

Analytical mindset

Investigative mindset

Ownership

Communication skills

Automation interest

Independent work

Proactivity

Curiosity about cybersecurity

Herramientas

Elastic/OpenSearch/Splunk/Microsoft Sentinel

Descripción del empleo

General description

We are looking for a Security Engineer with a focus on Managed Detection & Response (MDR), threat hunting, and improving security detection capabilities. In this role, you help identify potential cyber threats and strengthen how suspicious activity is detected across complex IT environments.

You work with security data, threat information, and engineering teams to understand unusual behaviour, identify gaps in existing monitoring, and develop or improve detection scenarios. The position combines security analysis with an engineering mindset and provides room to further develop your expertise in threat hunting and detection engineering.

You do not need to be a specialist in every technology involved. More important is a solid understanding of security and IT environments, an analytical mindset, and the ability to investigate how threats and systems behave.

Key responsibilities

• Develop and improve detection use cases based on relevant threats and observed behaviour.
• Perform proactive threat hunting to identify suspicious or abnormal activity.
• Analyse security logs and telemetry to investigate potential threats.
• Translate threat scenarios and security findings into practical detection approaches.
• Identify gaps in existing detection coverage and contribute to improvements.
• Refine detections to improve their accuracy and relevance.
• Help determine appropriate response, escalation, and automation actions when detections are triggered.
• Use threat intelligence and security developments to support new detection and hunting activities.
• Contribute to the continuous improvement of MDR and detection capabilities.
• Communicate relevant security findings and threat information to engineers and other stakeholders.
• Work with engineering teams to understand system behaviour and validate detection approaches.
• Collaborate with security, platform, and automation specialists to improve detection and response capabilities.

Requirements

• Experience within security engineering, security operations, threat detection, infrastructure, or a related technical security field.
• Experience working with security logs, monitoring data, telemetry, or comparable technical data sources.
• General understanding of IT infrastructure, networking, operating systems, and system behaviour.
• Ability to investigate and distinguish expected activity from potentially suspicious behaviour.
• Familiarity with security monitoring, SIEM, log analytics, or comparable security technologies.
• Understanding of fundamental security principles related to threat detection and response.
• An analytical approach to investigating technical and security-related problems.
• Interest in automation and improving security processes at scale.
• Ability to take ownership of security investigations and improvements.
• Good communication skills and the ability to turn technical findings into actionable information.

Competencies

• Analytical and investigative mindset.
• Curious about cybersecurity and how systems and threats behave.
• Proactive in identifying potential security improvements.
• Hands-on and comfortable investigating technical security problems.
• Strong sense of ownership and responsibility.
• Able to critically assess existing approaches and suggest improvements.
• Comfortable working independently and together with engineering and security teams.
• Able to clearly communicate findings to different stakeholders.
• Motivated to continuously develop cybersecurity knowledge.
• Interested in automation and continuous improvement.

Wishes

• Experience or a strong interest in threat hunting and detection engineering.
• Experience within a SOC, MDR, security operations, or comparable environment.
• Familiarity with scripting or automation, for example Python or Bash.
• Experience with SIEM or log analytics platforms such as Elastic, OpenSearch, Splunk, Microsoft Sentinel, or similar technologies.
• Familiarity with SOAR or security automation.
• Exposure to cloud environments such as AWS, Azure, or comparable platforms.
• Familiarity with modern engineering practices such as CI/CD, Git, or configuration tooling.
• Experience using threat intelligence to support security monitoring, detection, or investigations.

Relevant terms

Security Engineer, MDR, Managed Detection and Response, Threat Hunting, Detection Engineering, Threat Detection, Threat Intelligence, Security Operations, SOC, SIEM, SOAR, Security Monitoring, Security Automation, Detection Use Cases, Log Analysis, Security Telemetry, Incident Response, Security Analytics, Detection Coverage, Linux, Networking, Python, Bash, OpenSearch, Elastic, Splunk, Microsoft Sentinel, Cloud Security, AWS, Azure, CI/CD, Git, Security Engineering, Cyber Threats, Cybersecurity.