Detection Engineer

Detection Engineer
Baan • Best, NL
Geplaatst 9 sep. 2026
Delen:
Kopiëren
Werkervaring
2 tot 25 jaar
Full-time / part-time
Full-time
Functie
Salaris
€ 61.200 - € 101.900 per jaar
Opleidingsniveau
HBO of WO bachelor
Taalvereiste
Engels ( Vloeiend )
Bouw aan je carrière op Magnet.me
As a member of the Cyber Defense Capabilities team, the Detection Engineer is responsible for designing, implementing, and continuously validating detection capabilities for CSIRT. This includes building high-fidelity detection logic, regression testing to ensure detections remain effective over time, and executing breach and attack simulations (BAS) to align detection coverage with evolving adversary techniques and threat intelligence.
The Detection Engineer works closely with incident responders, threat hunters, and threat intelligence analysts to drive continuous improvement and reduce mean time to detect (MTTD). - Location: Best, Noord-Brabant, Netherlands - Job Type: Full time - For our office-based teams, this means working in-person at least 3 days per week. - This role is an office role. Your role: - Develop, test, and maintain detection rules, signatures, and correlation logic in SIEM and related platforms. - Conduct regression testing of detection rules to ensure accuracy, resilience, and functionality following system updates or logic changes. - Perform breach and attack simulations (BAS) to validate detection use cases, tied directly to threat intelligence and adversary TTPs. - Map detection logic to adversary techniques using frameworks such as MITRE ATT&CK and ensure coverage of priority threat scenarios. - Integrate threat intelligence feeds, IOCs, and behavioral patterns into detection workflows. - Regularly tune and refine detection logic to reduce false positives and optimize alert fidelity. - Partner with incident response and threat hunting teams to validate detections, perform purple team exercises, and a...