Detection Engineer - SIEM/XDR & ML Rule Specialist

DNV; Uppsala kommun; On-site; SEK 650,000 - 900,000; Full time

Job summary

DNV Cyber is seeking a Detection Engineer to design and implement advanced detection capabilities for SIEM and XDR, strengthening client security postures.

You will develop logic-based and ML-based detection rules, build automated SOC tooling, and collaborate with security professionals to deliver high-end services to our clients. Proficiency with Microsoft Sentinel, Splunk, Python or KQL, and a genuine passion for cybersecurity are essential.

Qualifications

• Customer communication skills to create customer value in cybersecurity.
• Experience with SIEM/XDR technologies such as Microsoft security stack.
• Exposure to data engineering concepts (data lakes, ETLs, ML Ops).
• Experience with scripting/programming (Python or PowerShell) and/or queries (KQL).
• Genuine passion for cybersecurity and willingness to stay updated with trends.
• Fluent English.

Responsibilities

• Develop and implement advanced detection capabilities for SIEM and XDR.
• Create logic-based and ML-based detection rules.
• Develop tools and automated solutions to enhance SOC operations.
• Collaborate with security professionals to deliver high-end services to clients.

Skills

SIEM

XDR

Python

KQL

Data engineering

English

Tools

Microsoft Sentinel

Splunk

Job description

DNV Cyber is seeking a Detection Engineer to design and implement advanced detection capabilities for SIEM and XDR, strengthening client security postures.

You will develop logic-based and ML-based detection rules, build automated SOC tooling, and collaborate with security professionals to deliver high-end services to our clients. Proficiency with Microsoft Sentinel, Splunk, Python or KQL, and a genuine passion for cybersecurity are essential.