Detection Engineer — SIEM, EDR and Detection-as-Code for NATO with security clearance

A multinational defence organisation is strengthening the detection engineering side of its security operations centre. This is not alert triage: you build the content the analysts depend on, measure whether it works, and close the gaps you find. What you would be doing Designing, building and maintaining detection rules, alerts and analytics across SIEM, EDR and XDR, network detection and cloud security tooling. Writing detection logic in the languages that suit it — Sigma, SPL, KQL. Building …