Rule Detection Engineer - SOC

DNV Group; Solna kommun; Hybrid; SEK 640,000 - 960,000; Full time

Job summary

DNV Cyber in Stockholm is seeking a Detection Engineer to join our Customer Delivery Unit within Security Operations. You will develop and implement advanced detection capabilities for SIEM and XDR, creating both logic-based and ML-based rules to bolster clients' security defences.

You will work with security tools like Microsoft Sentinel and Splunk, with strong programming and query skills (Python, KQL), collaborating across teams to deliver high-end cyber security services and tangible value

Qualifications

• Experience with security tools such as Microsoft Sentinel, XDR, or Splunk.
• Proficient in programming and query languages (Python, KQL).
• Strong customer communication and value delivery in cybersecurity.

Responsibilities

• Develop and implement advanced detection capabilities for SIEM/XDR.
• Create logic-based and ML-based detection rules.
• Develop innovative tools and automated solutions to enhance SOC operations.

Skills

Python

KQL

Programming

Query languages

Tools

Microsoft Sentinel

XDR

Splunk

Job description

Are you ready to dive into the world of cybersecurity with a dynamic and impactful role? Join our Customer Delivery Unit team within Security Operations!

DNV Cyber is a leading cybersecurity services provider, formed by merging Nixu, Applied Risk and DNV in 2024. At DNV Cyber we take pride in safeguarding what's critical to our customers and all of us as individuals - from personal data to industrial safety systems. We use our expertise and scale to tackle the most difficult cyber issues in multiple industries that are critical to society.

The role in short

As a Detection Engineer, your primary responsibility will be developing and implementing advanced detection capabilities to bolster our clients' security defenses, for example by creating both logic-based and more sophisticated ML-based detection rules for Security Information and Event Management (SIEM) and Extended detection and response (XDR) products. Furthermore, you will participate in developing innovative tools and automated solutions to enhance the effectiveness of our SOC operations.

What we're looking for

We are seeking a talented individual with previous experience working with security tools such as Microsoft Sentinel and XDR, Splunk, or similar technologies. Your experience is complemented by proficient skills in programming and query languages (e.g. Python and/or KQL).

You will be working as part of a team of security professionals with the purpose of delivering high-end services to our clients. This requires customer communication and understanding on how to provide value in cyber security to our clients.

Of course, a genuine passion for the cybersecurity field and an eagerness to learn are essential. We recognize your potential in specific areas that align with your expertise and contribute significantly to the team's success.

#DNVCyber

#LI-Hybrid