Cybersecurity Detection Engineer

About the role

Techpace is seeking an experienced Cybersecurity Detection Engineer to join its Security Operations Center (SOC). The role focuses on designing, testing, and refining detection content across a variety of on‑premise and cloud environments, ensuring robust threat coverage aligned with industry frameworks.

Key responsibilities

• Develop, test, and tune detections and parsers for multiple SIEM and EDR platforms.
• Continuously improve detection accuracy, reduce false positives, and enhance computational efficiency.
• Validate detection content against MITRE ATT&CK and Lockheed Martin’s Cyber Kill Chain.
• Monitor and optimize detection coverage across on‑premise and cloud service provider environments.
• Create complex detection rules using diverse data sources and query languages.
• Mentor and train junior analysts and engineers.

Required profile

• Minimum 5 years of experience as a SOC analyst or in a comparable cybersecurity role.
• Strong understanding of SIEM products from both analytical and administrative perspectives.
• Hands‑on experience with Windows, Linux, Active Directory, PAM, IDS/IPS, firewalls, anti‑virus, EDR, CASB, NAC, and productivity applications.
• Proven track record in threat detection, incident response, and threat hunting.
• Familiarity with common threat‑intelligence feeds and integration into detection systems.
• Relevant certifications such as GCDA, CISSP, GCFA, or GMON.

Required skills

• SIEM platforms (e.g., Splunk, QRadar, ArcSight)
• Endpoint Detection & Response (EDR) tools
• IDS/IPS technologies
• Query languages (e.g., SPL, KQL, SQL)
• MITRE ATT&CK framework
• Lockheed Martin Cyber Kill Chain
• Network and endpoint security concepts