Detection Engineering & Response Lead
New
N
NebiusCloud Infrastructure
Remote - EuropeFull-TimeLead
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Experience
- 6+ years in security operations, detection engineering, or incident response — with at least 1–2 years leading or mentoring a team.
- Required Skills
- SQLKubernetesGo
Requirements
- 6+ years in security operations, detection engineering, or incident response.
- 1–2+ years leading or mentoring a team.
- Deep hands-on experience with cloud-native environments (Kubernetes, Linux workloads, container-based infrastructure).
- Proficiency in writing and tuning rules/detections in SIEM platforms (e.g., Chronicle, Splunk, Elastic) and SQL.
- Experience building or operating SOAR workflows and automating response at scale (ideally with Golang and Temporal).
- Working knowledge of threat intelligence frameworks (MITRE ATT&CK, Pyramid of Pain, Kill Chain).
- Solid incident response fundamentals including memory forensics, log analysis, and network traffic analysis.
- Strong stakeholder management skills for coordinating across diverse teams during active incidents.
- Experience with AI/ML and GPU cluster-related threats (nice to have).
- Familiarity with eBPF-based detection or runtime security tooling like Falco or Tetragon (nice to have).
Responsibilities
- Lead detection development to achieve full MITRE coverage and maintain low false-positive rates.
- Architect and operate detection coverage across cloud and bare-metal environments.
- Build and extend internal D&R tools and pipelines, including onboarding new logs and automating response runbooks.
- Integrate threat intelligence into detection logic and IR playbooks.
- Lead end-to-end incident response, including scoping, containment, root cause analysis, and post-incident reviews.
- Define and report on D&R metrics such as MTTD and MTTR.
- Build and maintain the Security Incident Response program.
View Full Description & ApplyYou'll be redirected to the employer's site
