Senior AI-Driven Detection Engineer (SIEM)

Procter & Gamble; Warszawa; Hybrid; PLN 180,000 - 260,000; Full time

Benefits offered by this job

Private health care

P&G stock

Saving plans

Sport cards

Job summary

Procter & Gamble in Warsaw is seeking a Senior Detection Engineer to build, tune, and scale detection across enterprise SIEM platforms. You will work at the intersection of detection engineering and AI, using agentic tooling and LLM-assisted workflows to accelerate threat detection development.

The role involves detection-as-code, collaboration with Threat Intelligence and Threat Hunting, and delivering measurable improvements in alert fidelity while reducing SOC case volume.

Qualifications

• 5+ years in detection engineering, security operations, or threat detection roles.
• Proven experience writing and tuning SIEM detection rules and analytics.
• Strong understanding of MITRE ATT&CK and its application to detection coverage.
• Proficiency in Python for automation and tooling.
• Experience with git-based workflows for managing security content.
• Familiarity with security log sources: EDR, identity, cloud, network, and proxy.
• Bachelor’s degree in Information Systems, Information Technology (IT), Computer Science, Engineering, or other technical / IT field and / or at least 5+ years of relevant experience

Responsibilities

• Design, build, test, and tune detection rules mapped to MITRE ATT&CK, prioritized by threat intelligence and business risk
• Write detection logic across the SIEM and data lake platforms
• Manage detection content as code — git-based workflows, PR reviews, CI/CD deployment pipelines
• Investigate and suppress false positives systematically using lookup-based architectures
• Collaborate with Threat Hunting and Threat Intelligence teams through structured handover processes (TI→TH→DE pipeline)
• Monitor emerging threats and rapidly develop detections for new TTPs, CVEs, and active campaigns
• Leverage AI agents and LLM-assisted workflows to accelerate detection rule development, validation, and coverage analysis
• Use and contribute to MCP (Model Context Protocol) tooling that enables AI-assisted detection validation
• Operate agentic pipelines that triage large rule libraries against live telemetry at scale
• Apply AI/ML techniques where appropriate for anomaly detection, behavioral analytics, or pattern identification
• Stay current on frontier AI threats and translate them into detection opportunities
• Work closely with SOC analysts to understand alert quality feedback and drive fidelity improvements
• Collaborate with data engineers on telemetry availability, data quality, and log source onboarding
• Contribute to detection coverage reporting and MITRE ATT&CK posture measurement
• Document detection logic, tuning rationale, and suppression decisions

Skills

Detection engineering

SIEM rules & analytics

Python

Git-based workflows

Threat Intelligence

Threat Hunting collaboration

Telemetry analysis

Education

Bachelor’s degree in Information Systems/IT/CS/Engineering

Tools

Git

Sigma

Kubernetes

Cloud platforms

GitHub Copilot

Job description

Procter & Gamble in Warsaw is seeking a Senior Detection Engineer to build, tune, and scale detection across enterprise SIEM platforms. You will work at the intersection of detection engineering and AI, using agentic tooling and LLM-assisted workflows to accelerate threat detection development.

The role involves detection-as-code, collaboration with Threat Intelligence and Threat Hunting, and delivering measurable improvements in alert fidelity while reducing SOC case volume.