Senior Detection Engineer - SIEM & Threat Detection Lead

Boston Consulting Group (BCG); Lisboa; Presencial; EUR 90 000 - 120 000; Tempo integral

Resumo da oferta

Boston Consulting Group (BCG) seeks a Senior Detection Engineer to shape and mature its global detection engineering capability within Security Operations. You will blend hands-on detection development with technical leadership to ensure detections remain threat-led, evidenced-based, and continuously improved as the threat landscape evolves.

You will collaborate with Offensive Security, CSIRT, Security Engineering, Threat Intelligence, and our managed security provider to set priorities,

Qualificações

• Extensive experience designing, developing and maintaining production detection content across SIEM, EDR, and security monitoring platforms.
• Deep knowledge of MITRE ATT&CK and threat-informed detection engineering.
• Advanced expertise with Splunk SPL and building complex detection logic.
• Ability to define engineering standards and repeatable practices to improve detection content.
• Proven leadership in mentoring engineers and driving technical initiatives.

Responsabilidades

• Lead the design, development and ongoing improvement of high-confidence detections across SIEM, EDR and enterprise security platforms.
• Define and maintain detection engineering standards, development practices and quality expectations.
• Drive the detection engineering roadmap using threat intelligence and ATT&CK coverage.
• Lead complex detection projects, providing technical leadership while contributing to hands-on development.
• Collaborate with Offensive Security, CSIRT, Security Engineering, and Threat Intelligence to ensure detection content stays threat-led and well-telemetry-supported.

Conhecimentos

Detection engineering

Splunk SPL

MITRE ATT&CK

Leadership

Threat intelligence

Ferramentas

Splunk

Descrição da oferta de emprego

Boston Consulting Group (BCG) seeks a Senior Detection Engineer to shape and mature its global detection engineering capability within Security Operations. You will blend hands-on detection development with technical leadership to ensure detections remain threat-led, evidenced-based, and continuously improved as the threat landscape evolves.

You will collaborate with Offensive Security, CSIRT, Security Engineering, Threat Intelligence, and our managed security provider to set priorities,