Detection Engineer: Build Next-Gen Threat Detectors

Atea ASA; Drammen; On-site; NOK 800,000 - 1,200,000; Full time

Job summary

Atea ASA's Cyber Security Operations Center is seeking a Detection Engineer to develop, test and improve detections across SIEM and security platforms. You will work with Detection & Response specialists, Security Operations, Incident Response and Threat Intelligence to turn threat intel into practical detections.

This role uses Detection as Code, with content developed, versioned and deployed through engineering pipelines.

Qualifications

• Experience in cyber security and security operations.
• Experience with SIEM platforms (Microsoft Sentinel or similar).
• Strong understanding of cloud security and attacker behaviour (MITRE ATT&CK).
• Knowledge of Detection as Code practices is a plus.

Responsibilities

• Develop, test and improve detection content across SIEM and security platforms.
• Translate threat intelligence and attacker techniques into practical detections.
• Tune, validate and maintain detections for reliability and value.
• Contribute to Detection as Code pipelines and best practices.
• Collaborate with Security Operations, Incident Response and Threat Intelligence teams.
• Identify detection gaps and share knowledge across the security community.

Skills

Cyber security

Security operations

Detection engineering

Microsoft Sentinel

Cloud security

MITRE ATT&CK

Education

Bachelor's degree in Information Technology, Information Security, Cyber Security, Data Science or a related field

Tools

Sigma rules

YARA rules

Git

Terraform

Ansible

Splunk

Microsoft Sentinel

Job description

Atea ASA's Cyber Security Operations Center is seeking a Detection Engineer to develop, test and improve detections across SIEM and security platforms. You will work with Detection & Response specialists, Security Operations, Incident Response and Threat Intelligence to turn threat intel into practical detections.

This role uses Detection as Code, with content developed, versioned and deployed through engineering pipelines.