Назад
Company hidden
7 дней назад

Senior Security Engineer, Detection & Response

Формат работы
hybrid
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
Netherlands
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Senior Security Engineer, Detection & Response (SIEM/Cloud Security): Building and tuning end-to-end security detections across endpoint, identity, SaaS, and cloud environments with an accent on detection quality, incident response, and telemetry design. Focus on automating investigations, leading EMEA-hours response, threat hunting across the estate, and closing visibility gaps before systems ship.

Location: Amsterdam, Netherlands; office attendance three times a week

Company

hirify.global provides technology for global commerce and logistics, helping companies move merchandise across international supply chains.

What you will do

  • Build, tune, version-control, peer-review, and deploy detections across endpoint, identity, SaaS, and cloud environments.
  • Measure detection coverage against MITRE ATT&CK, precision, and time-to-detect, continuously improving production logic.
  • Own EMEA-hours incident response, including triage, containment, remediation, and incident retrospectives.
  • Develop automation to reduce investigation toil and coordinate incident context with the US-based security team across time zones.
  • Define telemetry requirements for infrastructure and product systems before launch to close visibility gaps.
  • Conduct proactive threat hunts and convert findings into new detections or documented coverage.

Requirements

  • 5–8 years of experience in detection engineering, incident response, or threat hunting, with hands-on experience writing and tuning detections.
  • Proficiency in at least one programming language, such as Python or Go, and the ability to write production-grade detection and automation code.
  • Experience with a modern SIEM or detection pipeline, such as Panther, Elastic, Splunk, or similar.
  • Practical experience leading or substantially contributing to the triage and resolution of real security incidents.
  • Ability to work from Amsterdam and attend the office three times per week.

Nice to have

  • Experience treating detections as code through CI/CD, peer review, and staged rollout.
  • Experience defining telemetry contracts for systems before launch.
  • Experience evaluating and validating AI-assisted work.
  • Familiarity with EU data residency and cross-border data-handling considerations.
  • Experience with fraud or financial-crime detection patterns.

Culture & Benefits

  • Follow-the-sun pager rotation so local overnight paging is avoided.
  • Close collaboration with security colleagues across continents and flexible, team-led ways of working.
  • Latest hardware and software, including frontier AI models.
  • 25 vacation days, health insurance with the monthly premium covered, and a defined pension contribution scheme.
  • Equity program, catered office meals, commuting cost coverage for employees living outside Amsterdam, and parental leave.
  • Visa sponsorship is available for the right candidate.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →