Lead Detection Engineer: MITRE-Driven Threat Hunting

NETS; Singapore; On-site; SGD 180,000 - 280,000; Full time

Job summary

NETS is seeking a seasoned Detection Engineer to lead the design and execution of high‑fidelity detection use cases across SIEM, EDR, NDR, and cloud platforms. You will drive Detection‑as‑Code practices, mentor SOC analysts, and collaborate with IR to convert hunts into incidents.

You will utilize MITRE ATT&CK as the framework for coverage, reduce dwell time and false positives, and champion telemetry expansion across the enterprise.

Qualifications

• 10–15+ years of cybersecurity experience with 5+ years in detection engineering / threat hunting / SOC engineering.
• 3+ years in a lead or senior technical role.
• Deep understanding of MITRE ATT&CK framework and adversary TTPs.

Responsibilities

• Design, develop, and tune high-fidelity detection use cases across SIEM, EDR, NDR, and cloud platforms.
• Build detection logic mapped to MITRE ATT&CK, reducing dwell time and false positives.
• Drive Detection-as-Code with automation, version control, and CI/CD pipelines.
• Lead proactive threat hunting campaigns across endpoints, network, cloud, and identity systems.
• Collaborate with Incident Response to translate hunts into incidents and improvements.
• Operationalize threat intelligence into actionable detection use cases.

Skills

Leadership

Mentoring

Analytical mindset

Stakeholder management

Tools

SIEM platforms

EDR/XDR

Threat hunting tooling

Agentic AI / LLM

MITRE ATT&CK

Python

PowerShell

Job description

NETS is seeking a seasoned Detection Engineer to lead the design and execution of high‑fidelity detection use cases across SIEM, EDR, NDR, and cloud platforms. You will drive Detection‑as‑Code practices, mentor SOC analysts, and collaborate with IR to convert hunts into incidents.

You will utilize MITRE ATT&CK as the framework for coverage, reduce dwell time and false positives, and champion telemetry expansion across the enterprise.