Detection Engineer — SIEM, EDR and Detection-as-Code for NATO with security clearance
Enregistrez cette offre et organisez votre recherche
Créez un compte gratuit pour enregistrer des offres d'emploi, créer des alertes et revenir à cette liste depuis votre tableau de bord.
What You Would Be Doing
- Designing, building and maintaining detection rules, alerts and analytics across SIEM, EDR and XDR, network detection and cloud security tooling.
- Writing detection logic in the languages that suit it — Sigma, SPL, KQL.
- Building detections around adversary behaviour and mapping them to the MITRE ATT&CK framework, with advanced persistent threats in mind.
- Turning threat intelligence and purple team findings into working automated detections.
- Running a proper detection lifecycle — design, development, testing, deployment, monitoring, improvement, review — and improving the quality metrics behind it.
- Assessing detection coverage across on-premise and cloud estates, and doing the gap analysis that says where to invest next.
- Reviewing newly ingested log sources against the common information model, auditing field extractions and event mappings, and chasing data owners when something does not line up.
- Supporting incident handlers and threat hunters when an investigation is live.
What you would bring
- Real detection engineering experience, and the version control and code review habits that make it repeatable.
- Hands-on work with a major SIEM and with endpoint and network detection tooling.
- Fluency in at least one detection language, and enough scripting to automate the rest.
- Familiarity with adversary tradecraft and with the ATT&CK framework as a working tool rather than a poster.
- Professional English, and the ability to explain a detection decision to people who did not write it.
The assignment is on-site near Mons.
-
Detection Engineer — SIEM/EDR for NATO Security Ops
Il y a 3 jours
Henegouwen, Henegouwen, Belgique EMW, Inc. Temps plein 70 000 € - 100 000 € ContratEMW, Inc. is seeking a Detection Engineer to design, implement, and refine detection rules across SIEM/EDR/NDR and cloud security tools.You will develop detections aligned with attacker TTPs and MITRE ATT&CK, focusing on NATO-related threats, and collaborate with NCSC, CTIS, and CSIRT to operationalize findings. The role requires hands-on experience in SOC...
-
Detection Engineer and Escalation Analyst
Il y a 4 jours
Henegouwen, Henegouwen, Belgique Wlgroup Temps plein 70 000 € - 110 000 € ContratSecond line is where an alert stops being noise and becomes a decision. You would be the technical escalation point in a large defence security operations centre in Mons, Belgium - validating what the first line produces, digging into the cases they cannot close, and building the detections that stop the same thing reaching them twice. What you would be...
-
Detection Engineer – SIEM/EDR Threat Detection
Il y a 4 jours
Henegouwen, Henegouwen, Belgique EMW Temps plein 70 000 € - 100 000 € ContratEMW is seeking a Detection Engineer to design, implement, and maintain advanced detection rules across SIEM, EDR, and cloud environments in a NATO-focused security program. The role emphasizes translating attacker TTPs into effective detections, collaborating with CSOC, Threat Hunting, and other teams, and maturing the Detection-as-Code approach.The...
-
Henegouwen, Henegouwen, Belgique Wlgroup Temps plein 65 000 € - 90 000 € ContratPlenty of security posts are about advice. This one is about hands on hardware and software: standing up boundary protection, detection, monitoring and forensic tooling, integrating it into existing environments, testing it properly and handing it over to operations in a state someone else can run.The tooling is named rather than hypothetical, and the work...
-
Detection Engineer – SIEM/EDR
Il y a 3 jours
Henegouwen, Henegouwen, Belgique Spektrum Temps plein 65 000 € - 95 000 € ContratSpektrum supports apex purchasers (NATO, UN, EU, and National Government and Defence) with specialist services in aerospace and defence security. The NATO NCIA engagement requires skilled detection engineers to design, develop, and maintain rule sets for SIEM, EDR/XDR, and cloud security tools.You will implement detection logic using Sigma, SPL and KQL,...
-
Henegouwen, Henegouwen, Belgique Wlgroup Temps plein 90 000 € - 120 000 € ContratA multinational defence organisation runs its security monitoring on a large, distributed Splunk estate, and is looking for the engineer who will own it. This is the senior technical voice on log collection and detection tooling for a cyber security data team, not a ticket-queue role. What you would be doing Acting as the subject matter expert for the...
-
Henegouwen, Henegouwen, Belgique Wlgroup Temps plein 70 000 € - 110 000 € ContratA multinational defence organisation runs its security monitoring on a large, distributed Splunk estate, and is looking for the engineer who will own it. This is the senior technical voice on log collection and detection tooling for a cyber security data team, not a ticket-queue role. What you would be doing Acting as the subject matter expert for the...
-
CSIRT Analyst
Il y a 5 jours
Henegouwen, Henegouwen, Belgique Wlgroup Temps plein 90 000 € - 120 000 € ContratWhen something gets in, somebody has to be the one who stays calm and works the problem. That is this job. You would join the incident response team of a multinational defence organisation in Mons, Belgium, under the section head — responding to security incidents around the clock, and helping the wider alliance and its partners do the same. What you would...
-
Second Line SOC Analyst
Il y a 4 jours
Henegouwen, Henegouwen, Belgique Wlgroup Temps plein 70 000 € - 95 000 € ContratSecond line is where an alert stops being noise and becomes a decision. You would be the technical escalation point in a large defence security operations centre in Mons, Belgium - validating what the first line produces, digging into the cases they cannot close, and building the detections that stop the same thing reaching them twice. What you would be...
-
Henegouwen, Henegouwen, Belgique WLG Temps plein 60 000 € - 90 000 € ContratWhat You Would Be Doing Designing, building and maintaining detection rules, alerts and analytics across SIEM, EDR and XDR, network detection and cloud security tooling. Writing detection logic in the languages that suit it — Sigma, SPL, KQL. Building detections around adversary behaviour and mapping them to the MITRE ATT&CK framework, with advanced...
