Detection Engineer: SIEM/XDR & ML Rules

DNV; Göteborgs kommun; On-site; SEK 700,000 - 900,000; Full time

Job summary

DNV Cyber is seeking a Detection Engineer to design and implement advanced detection capabilities for client security environments. You will work with SIEM and XDR tools, creating both rule-based and ML-based detections to bolster SOC operations.

You will collaborate with security professionals, develop new tooling, and contribute to automation efforts that improve threat detection and response. A genuine passion for cybersecurity and continuous learning is essential.

Qualifications

• Customer communication skills to create client value in cybersecurity.
• Experience with SIEM and XDR technologies (e.g., Microsoft stack).
• Exposure to data engineering concepts (data collection, data lakes, ETLs, ML Ops).
• Experience with at least one scripting/programming language (Python or PowerShell) and/or queries (KQL).
• Genuine passion for cybersecurity and eagerness to learn.

Responsibilities

• Develop and implement advanced detection capabilities for SIEM/XDR environments.
• Create logic-based and ML-based detection rules.
• Contribute to developing tools and automated solutions to improve SOC effectiveness.
• Collaborate with security professionals to deliver high-end services to clients.

Skills

Customer communication

SIEM

XDR

Python

KQL

Data engineering

Scripting languages

English fluency

Tools

Microsoft Sentinel

Splunk

Job description

DNV Cyber is seeking a Detection Engineer to design and implement advanced detection capabilities for client security environments. You will work with SIEM and XDR tools, creating both rule-based and ML-based detections to bolster SOC operations.

You will collaborate with security professionals, develop new tooling, and contribute to automation efforts that improve threat detection and response. A genuine passion for cybersecurity and continuous learning is essential.