Cybersecurity Engineer – Detection (UCF)

About the role

We are seeking an experienced Cybersecurity Engineer to join the Detection Engineering team (UCF). The role focuses on designing, developing and optimizing detection content that empowers the Security Operations Center to identify and respond to emerging cyber threats.

Key responsibilities

• Design, develop and maintain detection rules, signatures and playbooks within the Use Case Factory (UCF).
• Build, test, deploy and continuously tune detection logic to improve accuracy and reduce false positives.
• Validate detection capabilities against new threat techniques and ensure coverage across the SOC.
• Deploy and maintain detection capabilities across SOC infrastructure, correlating events from multiple data sources.
• Collaborate with Threat Intelligence, Threat Hunting and SOC teams to enhance detection coverage and operational effectiveness.
• Maintain technical documentation and support continuous‑improvement initiatives.

Required profile

• Bachelor’s degree in Computer Science, Cybersecurity, IT or related field (preferred).
• 6‑10 years of experience in cybersecurity operations, detection engineering or SOC environments.
• Proven experience creating and managing detection rules in SIEM platforms such as Splunk.
• Strong analytical, problem‑solving and communication skills in English.

Required skills

• SIEM platforms – Splunk
• SOAR platforms
• Scripting languages – Python, PowerShell, Bash
• CI/CD pipeline integration