Rule Detection Engineer - SOC

DNV; Solna kommun; Hybrid; SEK 700,000 - 950,000; Full time

Job summary

DNV Cyber is seeking a Detection Engineer to develop and implement advanced detection capabilities for SIEM and XDR products, strengthening client security defenses. You will design logic-based and ML-based rules and help build automated SOC tools.

The role requires experience with Microsoft Sentinel or similar SIEM/XDR tech, proficiency in Python or PowerShell, and strong communication with clients. English fluency is essential.

Qualifications

• Customer communication skills with ability to create customer value in cyber security.
• Experience with SIEM/XDR technologies such as Microsoft security stack.
• Exposure to data engineering concepts (e.g. data collection, data lakes, ETLs, ML Ops) is appreciated.
• Experience with at least one scripting and programming language (e.g. Python or PowerShell) and/or experience in writing queries with a query language (e.g. KQL).
• Genuine Passion for Cybersecurity: while previous cybersecurity experience is not mandatory, strong interest is essential.
• Fluent skills in English.

Responsibilities

• Develop and implement advanced detection capabilities to bolster client security defenses.
• Create both logic-based and ML-based detection rules for SIEM and XDR products.
• Develop innovative tools and automated solutions to enhance SOC operations.
• Collaborate with security professionals to deliver high-end services to clients.

Skills

Customer communication

SIEM/XDR experience

Python or PowerShell

KQL queries

English fluent

Data engineering exposure

Tools

Microsoft Sentinel

Splunk

XDR platforms

Job description

About Us

We are the independent expert in assurance and risk management. Driven by our purpose, to safeguard life, property, and the environment, we empower our customers and their stakeholders with facts and reliable insights so that critical decisions can be made with confidence.

We are the independent expert in assurance and risk management. Driven by our purpose, to safeguard life, property, and the environment, we empower our customers and their stakeholders with facts and reliable insights so that critical decisions can be made with confidence. As a trusted voice for many of the world’s most successful organizations, we use our knowledge to advance safety and performance, set industry benchmarks, and inspire and invent solutions to tackle global transformations.

About The Role

Are you ready to dive into the world of cybersecurity with a dynamic and impactful role? Join our Customer Delivery Unit team within Security Operations!

DNV Cyber is a leading cybersecurity services provider, formed by merging Nixu, Applied Risk and DNV in 2024. At DNV Cyber we take pride in safeguarding what’s critical to our customers and all of us as individuals – from personal data to industrial safety systems. We use our expertise and scale to tackle the most difficult cyber issues in multiple industries that are critical to society.

The role in short

As a Detection Engineer, your primary responsibility will be developing and implementing advanced detection capabilities to bolster our clients' security defenses, for example by creating both logic-based and more sophisticated ML-based detection rules for Security Information and Event Management (SIEM) and Extended detection and response (XDR) products. Furthermore, you will participate in developing innovative tools and automated solutions to enhance the effectiveness of our SOC operations.

What We're Looking For

We are seeking a talented individual with previous experience working with security tools such as Microsoft Sentinel and XDR, Splunk, or similar technologies. Your experience is complemented by proficient skills in programming and query languages (e.g. Python and/or KQL). You will be working as part of a team of security professionals with the purpose of delivering high-end services to our clients. This requires customer communication and understanding on how to provide value in cyber security to our clients. Of course, a genuine passion for the cybersecurity field and an eagerness to learn are essential. We recognize your potential in specific areas that align with your expertise and contribute significantly to the team's success.

What we offer

At DNV Cyber, we are passionate about cybersecurity and take pride in the way we are impacting the society we live in. We encourage you to excel professionally through knowledge sharing and demanding cases. At DNV Cyber, you'll have 500 colleagues who share an interest in cyber security with you. With us, you will be surrounded by the most talented people in the cybersecurity field.

Join us on an exciting adventure of growth, meaningful work, and shaping the future through cybersecurity!

Visit our website to get to know more about us!

DNV is an Equal Opportunity Employer and gives consideration for employment to qualified applicants without regard to gender, religion, race, national or ethnic origin, cultural background, social group, disability, sexual orientation, gender identity, marital status, age or political opinion. Diversity is fundamental to our culture and we invite you to be part of this diversity.

About You

You have the following

• Customer communication skills with ability to create customer value in the area of cyber security
• Experience with SIEM and XDR technologies such as Microsoft security stack. Experience with other similar SIEM and/or XDR systems is appreciated too
• Exposure to data engineering concepts (e.g. data collection, data lakes, ETLs, ML Ops, etc.) is appreciated
• Experience with at least one scripting and programming language (e.g. Python or Powershell) and/or experience in writing queries with a query language (e.g. KQL)
• Genuine Passion for Cybersecurity: While previous experience in cybersecurity is not mandatory, the candidate must demonstrate a genuine passion for the field and a strong interest in staying up to date with the latest trends and emerging threats
• Innovative Problem-Solving Skills, Adaptability and Collaboration is appreciated
• Fluent skills in English

Desired But Not Required

• Experience with Git-based CI/CD pipelines, IaC (Infrastructure as Code), and DaC (Detection as Code)
• Experience in working in or in cooperation with a Security Operation Center (SOC)

Security and compliance with statutory requirements in the countries in which we operate is essential for DNV. Background checks will be conducted on all final candidates as part of the offer process, in accordance with applicable country-specific laws and practices.