7 дней назад
Senior Security Engineer, Detection & Response
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Senior Security Engineer, Detection & Response (SIEM/Cloud Security): Building and tuning end-to-end security detections across endpoint, identity, SaaS, and cloud environments with an accent on detection quality, incident response, and telemetry design. Focus on automating investigations, leading EMEA-hours response, threat hunting across the estate, and closing visibility gaps before systems ship.
Location: Amsterdam, Netherlands; office attendance three times a week
Company
provides technology for global commerce and logistics, helping companies move merchandise across international supply chains.
What you will do
- Build, tune, version-control, peer-review, and deploy detections across endpoint, identity, SaaS, and cloud environments.
- Measure detection coverage against MITRE ATT&CK, precision, and time-to-detect, continuously improving production logic.
- Own EMEA-hours incident response, including triage, containment, remediation, and incident retrospectives.
- Develop automation to reduce investigation toil and coordinate incident context with the US-based security team across time zones.
- Define telemetry requirements for infrastructure and product systems before launch to close visibility gaps.
- Conduct proactive threat hunts and convert findings into new detections or documented coverage.
Requirements
- 5–8 years of experience in detection engineering, incident response, or threat hunting, with hands-on experience writing and tuning detections.
- Proficiency in at least one programming language, such as Python or Go, and the ability to write production-grade detection and automation code.
- Experience with a modern SIEM or detection pipeline, such as Panther, Elastic, Splunk, or similar.
- Practical experience leading or substantially contributing to the triage and resolution of real security incidents.
- Ability to work from Amsterdam and attend the office three times per week.
Nice to have
- Experience treating detections as code through CI/CD, peer review, and staged rollout.
- Experience defining telemetry contracts for systems before launch.
- Experience evaluating and validating AI-assisted work.
- Familiarity with EU data residency and cross-border data-handling considerations.
- Experience with fraud or financial-crime detection patterns.
Culture & Benefits
- Follow-the-sun pager rotation so local overnight paging is avoided.
- Close collaboration with security colleagues across continents and flexible, team-led ways of working.
- Latest hardware and software, including frontier AI models.
- 25 vacation days, health insurance with the monthly premium covered, and a defined pension contribution scheme.
- Equity program, catered office meals, commuting cost coverage for employees living outside Amsterdam, and parental leave.
- Visa sponsorship is available for the right candidate.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →