Senior Detection Engineer - SIEM & Threat Automation

F5 Networks, Inc.; Warszawa; On-site; PLN 180,000 - 240,000; Full time

Job summary

F5 Networks, Inc. is seeking a Security Engineer III to design, implement, and optimize detections across SIEM/EDR and cloud environments. You will partner with Incident Response, Threat Intelligence, and engineering teams to translate emerging threats into practical detection content.

This full-time role emphasizes automation, scalable workflows, and cross-functional collaboration. The ideal candidate has 5+ years in cybersecurity, strong ATT&CK knowledge, and experience with detection

Qualifications

• 5+ years in cybersecurity, security engineering, detection engineering, or related roles.
• Experience developing or tuning detections in SIEM/EDR/log analytics.
• Proficient in scripting/automation using Python, PowerShell, SQL, or similar.
• Strong knowledge of attacker techniques and MITRE ATT&CK.
• Excellent analytical and cross-functional collaboration skills.

Responsibilities

• Develop and maintain detections using Detection-as-Code practices with version control, reviews, testing, and CI/CD.
• Analyze and improve coverage by mapping telemetry to adversary behaviors and MITRE ATT&CK.
• Partner with Incident Response, Threat Intelligence, Logging Engineering, and security teams to implement detection content.
• Validate detections via adversary emulation, atomic testing, purple-team exercises, and production feedback.
• Automate detection engineering workflows and enrichment processes for efficiency and scale.
• Onboard new log sources and telemetry, ensuring coverage across environments and technologies.
• Create detection documentation, runbooks, and technical standards; participate in on-call rotation.
• Help define detection strategy for AI/agentic systems and explore AI to accelerate workflows.

Skills

Cybersecurity experience

Detection engineering

Security operations

Scripting & automation

MITRE ATT&CK knowledge

Collaboration skills

Education

Bachelor's degree in Information Security or related field

Tools

CrowdStrike

Splunk

Microsoft Sentinel

Chronicle

Elastic

Job description

F5 Networks, Inc. is seeking a Security Engineer III to design, implement, and optimize detections across SIEM/EDR and cloud environments. You will partner with Incident Response, Threat Intelligence, and engineering teams to translate emerging threats into practical detection content.

This full-time role emphasizes automation, scalable workflows, and cross-functional collaboration. The ideal candidate has 5+ years in cybersecurity, strong ATT&CK knowledge, and experience with detection