Detection Engineer

Job D escription

This role would suit someone with hands-on cybersecurity experience who enjoys investigating threats, solving complex problems and continuously improving detection capabilities.

What will I be doing?

As a Detection Engineer, you'll join a global team responsible for the continuous development and improvement of our threat detection capabilities across a range of key product areas. You'll respond to customer requests and incidents, analyse cyber threat intelligence, and use your findings to continually improve our detection coverage.

You'll be expected to

• Develop and expand detection schemes to support new products and areas of coverage, aligning detections with relevant threats and attack techniques.
• Analyse cybersecurity incidents and emerging adversary techniques to identify opportunities for new detections and improvements to existing coverage.
• Support customer investigations and incident response activities, prioritising time-sensitive and high-priority issues.
• Collaborate with Development, Security Research, SOC and customer-facing teams to improve detection quality, investigative workflows, internal tooling and processes.

You'll have the autonomy to drive the development of new detections and take ownership of identifying areas where our existing detection sets can be improved.

What experience do I need?

You'll have hands-on experience using security platforms to conduct thorough incident investigations, with a strong understanding of cybersecurity concepts and networking. You'll also be comfortable analysing endpoint telemetry to identify suspicious activity, validate detections and support incident response.

Ideally, your experience will include

• Analysing telemetry across one or more additional domains, such as Network, Identity, SaaS, Cloud or OT environments.
• Reviewing, assessing, developing, tuning or maintaining threat detection logic.
• Strong analytical and creative problem-solving skills.
• Strong time management, prioritisation and attention to detail.

Additional information

You'll be comfortable working independently and proactively, taking ownership of your work and driving improvements to detection sets. A genuine interest in keeping up to date with the latest cybersecurity threats, techniques and trends is also important.

It would be beneficial if you have experience with some of the following

• Darktrace products, such as Network, Identity, Cloud, Response or Endpoint.
• Working within a Managed SOC, Incident Response or Detection Engineering team.
• GitLab or a similar version-control platform.
• Data analysis, statistics, or developing tooling and automation using Python or other programming languages.

Benefits

• 23 days' holiday + all public holidays, rising to 25 days after 2 years of service,
• Additional day off for your birthday,
• Private medical insurance which covers you, your cohabiting partner and children,
• Life insurance of 4 times your base salary,
• Salary sacrifice pension scheme,
• Enhanced family leave,
• Confidential Employee Assistance Program,
• Cycle to work scheme.

As a growing business strengthening its governance and controls, this role plays a part in supporting high standards of integrity and accountability.