Detection Engineer — Shape Next-Gen Cyber Defenses

Atea; Luleå kommun; On-site; SEK 650,000 - 1,100,000; Full time

Job summary

Atea's Cyber Security Operations Center is seeking a Detection Engineer to develop, test and continuously improve detection content across SIEM platforms. You will translate threat intelligence, attacker techniques and customer needs into practical detections that are reliable and actionable.

You will work in a Detection as Code environment, collaborate with SOC, Incident Response, Threat Intelligence and Automation teams, and contribute to engineering pipelines.

Qualifications

• Experience in cyber security or security operations.
• Hands-on with SIEM platforms (e.g., Microsoft Sentinel).
• Knowledge of attacker techniques and MITRE ATT&CK.

Responsibilities

• Develop, test and improve detection content across SIEM and security platforms.
• Translate threat intelligence and attacker techniques into detections.
• Tune, validate and maintain detections for reliability and operational value.
• Contribute to Detection as Code pipelines and best practices.
• Collaborate with Security Operations, Incident Response and Threat Intelligence teams.
• Identify detection gaps and participate in security exercises and incidents.

Skills

Cyber security experience

Security operations

Detection engineering

Education

Bachelor's degree in Information Technology / Information Security / Cyber Security / Data Science

Tools

Microsoft Sentinel

Splunk

EDR

NDR

SOAR

Sigma

YARA

Git

Terraform

Ansible

Job description

Atea's Cyber Security Operations Center is seeking a Detection Engineer to develop, test and continuously improve detection content across SIEM platforms. You will translate threat intelligence, attacker techniques and customer needs into practical detections that are reliable and actionable.

You will work in a Detection as Code environment, collaborate with SOC, Incident Response, Threat Intelligence and Automation teams, and contribute to engineering pipelines.