Security Engineer - Global Tech Platform - Detection & Response - Latest tech & practices - Learning AI Security - High base, stock, bonus - Amsterdam, Hybrid

Sprint and Partners; Amsterdam; Ibrido; EUR 90.000 - 130.000; Tempo pieno

Descrizione del lavoro

Sprint and Partners is seeking Detection & Response Engineers to build production-grade detections, automate investigations and own incident response for a global technology platform. You’ll work in a hybrid setup with an Amsterdam office, collaborating across time zones and engineering teams to close visibility gaps and improve threat coverage.

You’ll write production-grade automation in Python or Go, tune detections and lead incident response from triage through remediation, while applying an

Competenze

• Hands-on experience shipping and tuning detection logic in a modern SIEM.
• Comfort with Python, Go or similar and handling real security incidents.
• Ownership mindset and ability to validate AI-assisted work.

Mansioni

• Build and tune detections across endpoint, identity, SaaS and cloud.
• Lead incident response from triage to remediation and retrospectives.
• Write production-grade automation to reduce investigative toil.
• Define telemetry requirements before new systems ship.

Conoscenze

Detection engineering

Incident response

Threat hunting

Python

Go

CI/CD

MITRE ATT&CK

Strumenti

Panther

Elastic

Splunk

Descrizione del lavoro

This is for the Detection & Response Engineers who want to build production-grade detections, automate investigations and own incident response in a global technology platform with high levels of ownership and impact.

Why this opportunity stands out:

• Security, platform and infrastructure work as one team. You’ll partner with the engineers building the systems you protect to establish telemetry and close visibility gaps.
• End-to-end ownership. You’ll write and tune detections, investigate what they uncover and turn incidents into lasting improvements.
• An engineering approach to security. Detections are version-controlled, peer-reviewed and shipped through CI/CD, with quality measured through coverage, precision and time-to-detect.
• Global collaboration with a follow-the-sun rotation. You’ll own response during EMEA hours and work closely with US colleagues to maintain continuity across time zones.
• Access to the latest technology, including frontier AI models from day one, with room to build automation and critically evaluate AI-assisted solutions.

What you’ll work on:

• Building and tuning detections across endpoint, identity, SaaS and cloud, measuring coverage against MITRE ATT&CK.
• Leading incident response from triage and containment through remediation and retrospectives that drive systemic fixes.
• Writing production-grade automation in Python, Go or similar to remove repetitive work from investigations and response.
• Defining telemetry requirements before new systems ship and proactively hunting threats, turning hypotheses into new detections or documented coverage.

Who we’d like to speak to:

• Experienced detection engineers, incident responders and/or threat hunters with hands-on experience shipping and tuning detection logic in a modern SIEM or detection pipeline, such as Panther, Elastic or Splunk.
• You should be comfortable coding in Python, Go or similar, handling real security incidents and solving ambiguous problems. You’ll enjoy building reliable solutions, taking ownership and validating the quality of both your own and AI-assisted work.

Compensation:

• You’ll get a top of market base salary, bonus and stock package with the secondary benefits you’d expect from a globally operating tech company.
• Hybrid with an office in Amsterdam, 3 days a week.
• Visa sponsorship + 30% ruling.
• Relocation is possible (lump sum available) for exceptional candidates who can join within 3 months.