Detection Engineer: SIEM/EDR/XDR with Clearance

EMW is seeking a Detection Engineer to design, implement, and maintain advanced detection rules across SIEM, EDR, and cloud environments in a NATO-focused security program. The role emphasizes translating attacker TTPs into effective detections, collaborating with CSOC, Threat Hunting, and other teams, and maturing the Detection-as-Code approach.The...

Spektrum supports apex purchasers (NATO, UN, EU, and National Government and Defence) with specialist services in aerospace and defence security. The NATO NCIA engagement requires skilled detection engineers to design, develop, and maintain rule sets for SIEM, EDR/XDR, and cloud security tools.You will implement detection logic using Sigma, SPL and KQL,...

Second line is where an alert stops being noise and becomes a decision. You would be the technical escalation point in a large defence security operations centre in Mons, Belgium - validating what the first line produces, digging into the cases they cannot close, and building the detections that stop the same thing reaching them twice. What you would be...

EMW, Inc. is seeking a Detection Engineer to design, implement, and refine detection rules across SIEM/EDR/NDR and cloud security tools.You will develop detections aligned with attacker TTPs and MITRE ATT&CK, focusing on NATO-related threats, and collaborate with NCSC, CTIS, and CSIRT to operationalize findings. The role requires hands-on experience in SOC...

What You Would Be Doing Designing, building and maintaining detection rules, alerts and analytics across SIEM, EDR and XDR, network detection and cloud security tooling. Writing detection logic in the languages that suit it — Sigma, SPL, KQL. Building detections around adversary behaviour and mapping them to the MITRE ATT&CK framework, with advanced...

Spektrum supports apex purchasers (NATO, UN, EU, and National Government and Defence) and their Tier 1 supplier ecosystem with a wide range of specialist services. We provide our clients with professional services, specialised aerospace and defence sales, delivery, and operational subject matter expertise. We are looking for personnel to join our team and...

WLG seeks a detection engineer to design, build and maintain rules and analytics across SIEM, EDR and XDR, plus network and cloud tooling. You will write detection logic in Sigma, SPL, or KQL and map findings to MITRE ATT&CK with adversary tradecraft in mind.You will translate threat intelligence and purple team results into automated detections, manage the...

Deadline Date: Wednesday 16 September 2026Requirement: Detection EngineerLocation: Mons, BEFull Time On-Site: YesTime On-Site: 100%Total Scope of the request (hours): 395Required Start Date: 26 October 2026End Contract Date: 31 December 2026Required Security Clearance: NATO SECRETDuties & RoleDesign, develop, and maintain detection rules, alerts, and...

A multinational defence organisation is strengthening the detection engineering side of its security operations centre. This is not alert triage: you build the content the analysts depend on, measure whether it works, and close the gaps you find.What you would be doingDesigning, building and maintaining detection rules, alerts and analytics across SIEM, EDR...