Senior Detection Engineer: AI-Driven Threat Detection

Procter & Gamble; Warszawa; Hybrid; PLN 260,000 - 380,000; Full time

Benefits offered by this job

Private health care

P&G stock

Saving plans

Sport cards

Job summary

Procter & Gamble is seeking a Senior Detection Engineer to join the InfoSec Cyber Defense Technology team in Warsaw. You will design, tune, and scale SIEM detections, leveraging AI-assisted workflows and detection-as-code practices to improve alert fidelity.

The role focuses on building detection logic across SIEM/data lakes, collaborating with Threat Intelligence and Threat Hunting, and staying ahead of AI-enabled threats. Hybrid work model with flexible in-office days.

Qualifications

• 5+ years in detection engineering, security operations, or threat detection.
• Proven experience writing and tuning SIEM detection rules/analytics.
• Strong understanding of MITRE ATT&CK and its application to detection coverage.
• Proficiency in Python for automation and tooling.
• Experience with git-based workflows for security content management.
• Familiarity with EDR, identity, cloud, network, and proxy log sources.
• Formal IT degree or equivalent professional experience.
• Security certifications are a plus.

Responsibilities

• Design, build, test, and tune detection rules mapped to MITRE ATT&CK.
• Write detection logic across SIEM and data lake platforms.
• Manage detection content as code with git-based workflows, PRs, CI/CD.
• Investigate and suppress false positives using lookup-based architectures.
• Collaborate with Threat Hunting and Threat Intelligence teams.
• Monitor emerging threats and rapidly develop detections for new TTPs.
• Leverage AI agents and LLM-assisted workflows to accelerate development.
• Use MCP tooling for AI-assisted detection validation.
• Operate agentic pipelines triaging large rule libraries against live telemetry.
• Apply AI/ML techniques for anomaly detection and behavior analytics.
• Stay current on frontier AI threats and translate them into opportunities.
• Workshop with SOC to improve alert fidelity and reduce noise.
• Document detection logic, tuning rationales, and suppression decisions.

Skills

Detection engineering

Threat detection

SIEM analytics

Python

Git-based workflows

MITRE ATT&CK

YAML/ Sigma rules

AI/LLM tooling

Education

Bachelor’s degree in Information Systems / IT / Computer Science / Engineering

Certifications: CISSP, CCSP, OSCP, GCDA/GCIA

Tools

Git

Kubernetes

Cloud platforms

MCP servers

GitHub Copilot

Job description

Procter & Gamble is seeking a Senior Detection Engineer to join the InfoSec Cyber Defense Technology team in Warsaw. You will design, tune, and scale SIEM detections, leveraging AI-assisted workflows and detection-as-code practices to improve alert fidelity.

The role focuses on building detection logic across SIEM/data lakes, collaborating with Threat Intelligence and Threat Hunting, and staying ahead of AI-enabled threats. Hybrid work model with flexible in-office days.