SOC Detection Quality Engineer - Threat Detection Innovator

Northwave Cyber Security; Utrecht; On-site; EUR 70,000 - 110,000; Full time

Job summary

Northwave Cyber Security is seeking a Detection Quality Engineer (Medior/Senior) to turn threat intelligence and attacker behavior into high-quality detections that protect organisations across the Netherlands and Europe.

The role focuses on detection engineering, threat research and continuous improvement of MDR capabilities. You will collaborate with analysts, Red Team members and threat intelligence specialists to shape the future of detection engineering within Northwave.

Qualifications

• 3+ years of experience in cybersecurity with a focus on detection engineering, monitoring or detection rule development.
• Experience designing and maintaining security detections within an EDR, XDR or SIEM environment.
• Experience analyzing attack techniques and adversary behavior.

Responsibilities

• Design, build and continuously improve detection rules and monitoring content.
• Develop advanced detection logic using Microsoft Sentinel, Defender and other platforms.
• Translate attack techniques and adversary behavior into actionable detections.
• Tune, validate and optimize detections to maximize signal and minimize noise.
• Research emerging threats, attack campaigns and TTPs.
• Map threats to MITRE ATT&CK and the Cyber Kill Chain.
• Collaborate with analysts, engineers and threat intel to enhance coverage.

Skills

KQL

Microsoft Defender

Microsoft Sentinel

Suricata

Zeek

Python

Windows internals

Linux internals

Threat intelligence

Threat detection

Tools

Suricata

Zeek

EDR

SIEM

MISP

MITRE ATT&CK

Job description

Northwave Cyber Security is seeking a Detection Quality Engineer (Medior/Senior) to turn threat intelligence and attacker behavior into high-quality detections that protect organisations across the Netherlands and Europe.

The role focuses on detection engineering, threat research and continuous improvement of MDR capabilities. You will collaborate with analysts, Red Team members and threat intelligence specialists to shape the future of detection engineering within Northwave.