Deloitte

Audits companies and advises on tax and technology

Senior Detection Engineer

Security Operations & Incident ResponseConfirmed live in the last 24 hours

Full-timeNo salary listed

About the Job

Requirements

Three to six years of hands-on experience in detection engineering, threat hunting, or incident response.
At least three years of experience with one or more of Elastic (SIEM/EDR), Suricata, or Zeek.
Demonstrated experience writing, tuning, and validating detection logic in at least two of Sigma, YARA-L, or ESQL.
A deep understanding of detection deployment across the Detection Engineering Spectrum.
Experience with telemetry sources and threat modelling.
Ability to work in a fast-paced environment where threat-driven detection and rapid iteration are standard.
In-depth knowledge of MITRE ATT&CK and mapping detections to adversarial techniques.

Responsibilities

Deliver high-quality detection content.
Advise the Detection Engineering team on prioritization, coverage, and detection choke points.
Collaborate with CTI and Red Teams and guide the process of translating regular assessments into refined detection strategies.
Help shape a comprehensive threat detection strategy aligned with business objectives and industry best practices.
Mentor and support junior-to-mid-level detection engineers.
Contribute to threat modelling to identify high-value detection opportunities and coverage gaps.
Analyze telemetry sources, including Windows Event Logs, Sysmon, cloud logs, and network traffic, to identify detection use cases and ensure telemetry readiness.
Develop and implement advanced detection rules and monitoring solutions to identify cyber threats quickly and effectively.
Build monitoring capabilities for network traffic, security logs, EDR/NDR data, and OT environments.
Translate threat intelligence and Red Team reports into innovative detection opportunities.
Coach colleagues to encourage knowledge sharing and innovation.

Vacatureomschrijving

Verantwoordelijkheid voor het leveren van hoogwaardige detection content.
Het adviseren van het Detection Engineering-team over prioritering, dekking en detectie choke points.
Samenwerken met CTI en Red Teams en het begeleiden van het proces om reguliere assessments om te zetten in verfijnde detectie strategieën.
Een sleutelrol hebben in het vormgeven van een alomvattende threat detection-strategie die aansluit bij zakelijke doelstellingen en best practices uit de sector. doelstellingen en best practices uit de sector.
Mentor zijn voor en ondersteunen van junior tot medior detection engineers.
Bijdragen aan threat modelling om high-value detection opportunities en coverage gap te identificeren
Analyseren van telemetry sources (bijv. Windows Event Logs, Sysmon, cloud logs, network traffic) om detectie-use cases te identificeren en telemetry readiness te waarborgen.

Functie-eisen

3–6 jaar hands-on ervaring in detection engineering, threat hunting of incident response.
Minimaal drie jaar ervaring met ten minste één van: Elastic (SIEM/EDR), Suricata, Zeek.
Aantoonbare ervaring met het schrijven, tunen en valideren van detectielogica in ten minste twee van: Sigma, YARA-L, ESQL.
Diepgaand begrip van Detection deployment across the Detection Engineering Spectrum.
Ervaring met telemetry sources en threat modelling.
Je voelt je op je gemak in een fast-paced omgeving waarin threat-driven detection en rapid iteration de norm zijn.
Diepgaande kennis van MITRE ATT&CK en detection mapping of adversarial techniques.

Aanvullende informatie

Wil je een sleutelrol spelen in de bescherming van de vitale infrastructuur van Nederland tegen cyberaanvallen? Solliciteer als Senior Detection Engineer en werk binnen de toonaangevende Security Operations Centers (SOCs) van Nederland. We benutten de nieuwste technologieën om de cyberweerbaarheid van vitale organisaties structureel te versterken.

Als Senior Detection Engineer ontwikkel en implementeer je geavanceerde detectieregels en monitoringoplossingen om cyberdreigingen snel en effectief te signaleren. Je bouwt monitoring capabilities voor network traffic, security logs, EDR/NDR-data en OT-omgevingen. Daarnaast zet je threat intelligence- en Red Team-rapporten om in innovatieve detectieopties en coach je collega’s om kennisdeling en innovatie te stimuleren.

About the Company

Deloitte

Audits companies and advises on tax and technology

Deloitte audits companies and advises businesses and governments on tax, technology, and risk, and it is one of the Big Four, the world's four largest accounting firms. In 1849 its founder became the first independent auditor of a public company, Britain's Great Western Railway. Its auditors check companies' financial reports for errors and fraud before investors rely on them, while its consultants design strategy, install business software, and defend clients against cyberattacks. Clients pay fees for each audit or project, and each country's Deloitte firm is a separate business owned by its local partners. Deloitte was founded in London in 1845 and is based in New York.

Company size: 10,001+
Company stage: Late Stage VC
Total funding: $17.1M
Headquarters: New York, NY
Founded: 1845

Recently Posted Jobs

Explore more opportunities at Deloitte

See more jobs