Description
We are looking for a Detection Engineering & Automation Lead to improve detection quality and automation so high-risk attacker behavior is identified with less noise and faster investigation.
This is a unique opportunity to help build and mature the Detection Engineering & Automation function from an early stage, shaping processes, detection strategy, automation, and engineering best practices.
Responsibilities
- Lead and develop the Detection Engineering & Automation squad, setting priorities, mentoring team members, and driving the delivery of detection and automation initiatives
- Own the detection lifecycle end-to-end, including use-case definition, development, testing, tuning, and retirement
- Build and maintain SIEM/EDR detection rules, detection-as-code, enrichment workflows, and SOAR automation playbooks
- Collaborate with SOC, Cyber Defense leadership, Incident Response, and engineering teams to review false positives, reduce alert noise, and address detection coverage gaps
- Map detections to critical assets, attacker TTPs, telemetry sources, and incident response runbooks
- Ensure critical detections have a clear owner, documentation, and validated testing evidence
- Lead security automation initiatives that accelerate investigations while avoiding unsafe autonomous actions
Requirements
- Higher education in Computer Science, Information Security, or a related technical field is preferred
- 5+ years of experience in SOC, Detection Engineering, Threat Detection, or Security Automation
- 2+ years of hands-on experience in Detection Engineering
- 1+ year of experience leading or mentoring a team of engineers
- Hands-on experience writing and tuning detection content (Sigma, YARA, SIEM correlation rules) and applying detection-as-code practices
- Experience with SOAR platforms, automation playbooks, and scripting (Python or similar) to build integrations and automate security workflows
- Strong understanding of attacker TTPs (MITRE ATT&CK), telemetry sources (EDR, network, cloud, identity), and incident response workflows
- Experience defining and tracking Detection Engineering metrics and KPIs (MTTD, MTTR, false-positive rate, and detection coverage)
- English - Intermediate+
- Ukrainian\Russian - Upper-intermediate
Will be a plus
- Experience in fintech, brokerage, trading platforms, payments, or other regulated financial environments
- Experience with cloud-native detection (CNAPP/CSPM) across AWS, GCP, and Azure
- Experience with AI/LLM-assisted alert summarization or detection tooling
- Threat intelligence and threat hunting experience (CTI feeds, MISP, Maltego, or similar tools)
- Previous experience building a Detection Engineering function from an early maturity stage
We offer
- 20 paid vacation days per year
- 10 paid sick leave days per year
- Public holidays as per the company’s approved Public holiday list
- Medical budget
- Opportunity to work remotely
- Professional education budget
- Language learning budget
- Wellness budget (gym membership, sports gear and related expenses)
Similar jobs
Est. 80,000 EUR
We are looking for a Security Operation Manager to lead, mature, and operate our resilient security operations capability. In this role, you will own the defense of our environment, ensuring fast and precise threat detec…
Est. 120,000 EUR
We are looking for a Head of Security Operations Center (Head of SOC) to lead, mature, and operate our resilient security operations capability. In this role, you will own the defense of our environment, ensuring fast an…
Est. 120,000 EUR
We are inviting you, a highly motivated and results-oriented Enterprise & Cloud Security Manager to join our team on a full-time basis. Our team has unique expertise in research, analysis, and product development. By…
Est. 120,000 EUR
We are looking for a Cyber Defense Manager to lead, mature, and operate our resilient security operations capability. In this role, you will own the defense of our environment, ensuring fast and precise threat detection,…
Est. 80,000 EUR
We are looking for an Endpoint Security Engineer to join our Security team. In this role, you will be responsible for implementing, operating, and improving endpoint security controls across corporate workstations, produ…
Est. 120,000 EUR
We are looking for a DevSecOps and Application Security Lead to join our team and build our application security from scratch. In this role, you will lead the security direction within our department, focusing on integra…
Est. 195,000 USD
Our Purpose At SentinelOne, we are driven by a clear purpose: to give the advantage to those who secure our future. As AI reshapes how organizations build, operate, and innovate, the responsibility to protect them become…
Est. 48,000 EUR
Our Purpose At SentinelOne, we are driven by a clear purpose: to give the advantage to those who secure our future. As AI reshapes how organizations build, operate, and innovate, the responsibility to protect them become…
Est. 165,000 USD
At Beyond Finance, we've made it our mission to help everyday Americans escape the endless cycle of crippling debt and step into a brighter financial future. Through compassionate, individualized care, a culture focused…
Est. 80,000 EUR
We are looking for a technical Head of Corporate IT who is ready to take full ownership of the corporate infrastructure strategy, budget management, and the transformation of access and security processes. In this role,…
Our Purpose At SentinelOne, we are driven by a clear purpose: to give the advantage to those who secure our future. As AI reshapes how organizations build, operate, and innovate, the responsibility to protect them become…
Our Purpose At SentinelOne, we are driven by a clear purpose: to give the advantage to those who secure our future. As AI reshapes how organizations build, operate, and innovate, the responsibility to protect them become…
Est. 60,000 EUR
Our Purpose At SentinelOne, we are driven by a clear purpose: to give the advantage to those who secure our future. As AI reshapes how organizations build, operate, and innovate, the responsibility to protect them become…
Our Purpose At SentinelOne, we are driven by a clear purpose: to give the advantage to those who secure our future. As AI reshapes how organizations build, operate, and innovate, the responsibility to protect them become…
Est. 60,000 EUR
We invite you, a highly motivated and results-oriented Windows Site Reliability Engineer, to join our team full-time and ensure the reliability and stability of the company's infrastructure. Our team has unique expertise…
Our Purpose At SentinelOne, we are driven by a clear purpose: to give the advantage to those who secure our future. As AI reshapes how organizations build, operate, and innovate, the responsibility to protect them become…
Our Purpose At SentinelOne, we are driven by a clear purpose: to give the advantage to those who secure our future. As AI reshapes how organizations build, operate, and innovate, the responsibility to protect them become…
Est. 55,000 EUR
Responsibilities Create and maintain reporting and analytical dashboards that provide key business insights Search for insights and patterns through data analysis Based on the analysis results, make conclusions for the b…
Est. 80,000 EUR
We are inviting you, a highly motivated and results-oriented Windows DevOps Engineer, to join our team on a full-time basis, ensuring and developing solutions, as well as strengthening the product infrastructure. Our tea…
Our Purpose At SentinelOne, we are driven by a clear purpose: to give the advantage to those who secure our future. As AI reshapes how organizations build, operate, and innovate, the responsibility to protect them become…
Est. 120,000 EUR
Responsibilities Manage team capacity, resource allocation, and establish effective 24/7 on-call rotation processes for incident response. Take ownership of the infrastructure budget (FinOps), optimizing cloud costs acro…
Our Helpdesk team is the foundation of the company’s internal IT infrastructure. We ensure secure access to resources, manage the device fleet, maintain network reliability, and support core corporate services, enabling…
We are inviting you, a highly motivated and results-oriented Ruby Engineer to join our team for ensuring solutions, as well as strengthening the product.Our team has unique expertise in research, analysis, and product de…
Est. 120,000 PLN
Our Purpose At SentinelOne, we are driven by a clear purpose: to give the advantage to those who secure our future. As AI reshapes how organizations build, operate, and innovate, the responsibility to protect them become…
Our Purpose At SentinelOne, we are driven by a clear purpose: to give the advantage to those who secure our future. As AI reshapes how organizations build, operate, and innovate, the responsibility to protect them become…
Est. 54,000 EUR
Our Purpose At SentinelOne, we are driven by a clear purpose: to give the advantage to those who secure our future. As AI reshapes how organizations build, operate, and innovate, the responsibility to protect them become…
Est. 80,000 EUR
Our Purpose At SentinelOne, we are driven by a clear purpose: to give the advantage to those who secure our future. As AI reshapes how organizations build, operate, and innovate, the responsibility to protect them become…
Our Purpose At SentinelOne, we are driven by a clear purpose: to give the advantage to those who secure our future. As AI reshapes how organizations build, operate, and innovate, the responsibility to protect them become…
Our Purpose At SentinelOne, we are driven by a clear purpose: to give the advantage to those who secure our future. As AI reshapes how organizations build, operate, and innovate, the responsibility to protect them become…
Est. 80,000 EUR
Our Purpose At SentinelOne, we are driven by a clear purpose: to give the advantage to those who secure our future. As AI reshapes how organizations build, operate, and innovate, the responsibility to protect them become…