Global Cybersecurity Manager - Security Engineer

Boston Consulting Group; Portugal; Presencial; EUR 70 000 - 90 000; Tempo integral

Resumo da oferta

Boston Consulting Group is seeking an experienced Detection Content Specialist to establish and manage the technical content that drives our Detection Engineering programme within Threat Detection & Continuous Monitoring.

The role sits between threat intelligence, security operations and engineering, ensuring content remains threat-led, evidence-based and operationally relevant, while coordinating telemetry, catalog maintenance and cross‑team collaboration.

Qualificações

• Strong understanding of MITRE ATT&CK and threat-informed defence principles.
• Experience with SIEM platforms such as Splunk Enterprise Security, Microsoft Sentinel, Elastic or equivalents.
• Ability to translate threat scenarios into structured engineering requirements.
• Excellent written communication and documentation skills.
• Structured, engineering-focused approach to maintaining high-quality technical content.

Responsabilidades

• Develop and maintain the Detection Use Case Catalogue.
• Translate approved threat scenarios into actionable detection requirements.
• Maintain mappings between threats, ATT&CK techniques, telemetry requirements and detection use cases.
• Define telemetry requirements for new detection use cases and work with the Security Data Engineer to identify data gaps.
• Maintain the Detection Catalogue, ensuring metadata, ownership, status and documentation remain current.
• Prioritise detection engineering work in partnership with the Director and Senior Detection Engineer.
• Identify gaps in detection coverage and maintain the Detection Gap Register.
• Work with Detection Engineers to ensure detections align with approved use cases and engineering standards.
• Collaborate with Threat Intelligence, Offensive Security and CSIRT to incorporate emerging threats, operational feedback and lessons learned into the detection backlog.
• Support the production of detection coverage metrics, engineering reports and executive heatmaps.
• Contribute to the continuous improvement of detection standards, documentation and engineering processes.

Conhecimentos

MITRE ATT&CK

SIEM platforms

Threat-informed defence

Documentation

Analytical skills

Descrição da oferta de emprego

What You’ll Do

As we continue to build our global Threat Detection & Continuous Monitoring capability, we require an experienced Detection Content Specialist to establish and manage the technical content that drives our Detection Engineering programme.

This role sits between threat intelligence, security operations and detection engineering, ensuring that detection development is driven by well‑defined use cases, quality telemetry requirements and measurable security outcomes.

Rather than developing detection logic full‑time, you will define, maintain and continuously improve the detection content that enables our Detection Engineers to build high‑confidence detections aligned to the organisation's threat landscape.

Working closely with Detection Engineering, Security Data Engineering, CSIRT, Threat Intelligence, Offensive Security and Security Engineering, you will ensure detection content remains threat‑led, evidence‑based and operationally relevant.

Responsibilities

• Develop and maintain the Detection Use Case Catalogue.
• Translate approved threat scenarios into actionable detection requirements.
• Maintain mappings between threats, ATT&CK techniques, telemetry requirements and detection use cases.
• Define telemetry requirements for new detection use cases and work with the Security Data Engineer to identify data gaps.
• Maintain the Detection Catalogue, ensuring metadata, ownership, status and documentation remain current.
• Prioritise detection engineering work in partnership with the Director and Senior Detection Engineer.
• Identify gaps in detection coverage and maintain the Detection Gap Register.
• Work with Detection Engineers to ensure detections align with approved use cases and engineering standards.
• Collaborate with Threat Intelligence, Offensive Security and CSIRT to incorporate emerging threats, operational feedback and lessons learned into the detection backlog.
• Support the production of detection coverage metrics, engineering reports and executive heatmaps.
• Contribute to the continuous improvement of detection standards, documentation and engineering processes.

What You’ll Bring

• Strong understanding of MITRE ATT&CK and threat‑informed defence principles.
• Experience working with SIEM platforms such as Splunk Enterprise Security, Microsoft Sentinel, Elastic or equivalent.
• Good understanding of enterprise security telemetry and logging requirements.
• Experience translating threat scenarios into structured engineering requirements.
• Strong analytical and organisational skills with the ability to manage large detection catalogues and engineering backlogs.
• Experience working collaboratively with Detection Engineering, Security Operations, Threat Intelligence or Security Engineering teams.
• Excellent written communication and documentation skills.
• A structured, engineering‑focused approach to maintaining high‑quality technical content.

Who You’ll Work With

You will join BCG’s Continuous Monitoring & Threat Detection function and work closely with Detection Engineering, Security Data Engineering, CSIRT, Threat Intelligence, Offensive Security and Security Engineering teams.

You will partner with technical stakeholders across Cybersecurity to ensure detection engineering activities are driven by clearly defined use cases, supported by appropriate telemetry and aligned with the organisation's threat landscape.

Working alongside the Director of Continuous Monitoring & Threat Detection and the Senior Detection Engineer, you will help maintain the technical content, traceability and engineering backlog that underpin BCG's growing detection capability.

Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, disability, protected veteran status, or any other characteristic protected under national, provincial, or local law, where applicable, and those with criminal histories will be considered in a manner consistent with applicable state and local laws.

BCG is an E‑Verify Employer. Click here for more information on E‑Verify.