Beschreibung
What we're looking for
You'll own detection engineering and help shape how ARQ detects and responds to threats. From bringing new log sources into ARQ’s SIEM to writing, testing and tuning detections, you'll be responsible for making sure our coverage works when it matters.
We're looking for someone who combines hands-on detection experience with an engineering mindset. You'll work directly with our CISO and a small global security team, with the autonomy to prioritise gaps and build practical solutions. Automation is central to how we work: you'll build and run AI agents that support rule development, validation, alert triage and threat hunting, with you reviewing and approving their output.
What you'll do
Own detection engineering end to end in Datadog Cloud SIEM: identify missing log sources, prioritise onboarding and build reliable detection coverage.
Write, test and tune detection rules, reducing false positives while keeping meaningful threats visible.
Map coverage to MITRE ATT&CK and validate it by reproducing attacker activity.
Manage detections as code, using version control, CI pipelines and code review.
Build and run automation and AI agents for rule authoring, detection validation, coverage mapping, alert triage and threat hunting.
Investigate security incidents, including triage, scoping, evidence collection and clear incident write-ups.
Help develop automated response and containment capabilities.
Track and communicate detection coverage, validation resu
Vollständige Beschreibung, Unternehmen und Bewerbungslink — nach der Anmeldung.
AnmeldenKontaktdaten des Arbeitgebers (E-Mail/Telefon/Telegram) sind in der öffentlichen Vorschau ausgeblendet.
Senden Sie Ihren Lebenslauf — dann können Arbeitgeber Sie direkt kontaktieren.