Senior Threat Detection Engineer

About the role

As a Threat Detection Engineer at COGNNA, you'll design high‑impact detection strategies, build powerful automation, and elevate SOC operations to a world‑class standard. You will also mentor rising cyber talent and collaborate with teams across threat intel, incident response, and platform engineering.

Key responsibilities

• Develop high‑fidelity correlation rules and behavioral detections within COGNNA security platforms, translating MITRE ATT&CK tactics into actionable logic.
• Lead architecture and optimization of XDR, SIEM, and SOC tech stacks, streamlining log ingestion pipelines and building automation scripts.
• Collaborate with intel and incident response teams to enrich detection use cases, support threat hunts, and provide Tier‑3+ investigation support.
• Improve SOC playbooks, SOPs, and detection engineering workflows while ensuring compliance with regional standards.

Required profile

• Bachelor's degree in Computer Science, Cybersecurity, or a related field.
• Minimum three years of hands‑on experience developing and maintaining complex detection use cases.
• Strong understanding of attacker behavior, incident response fundamentals, and digital forensics.

Required skills

• SIEM query languages (SPL, KQL, Lucene) and rule tuning.
• Endpoint Detection and Response (EDR) tools.
• Network packet analysis using Wireshark, IDS/IPS, and NetFlow.
• Scripting and automation with Python and PowerShell.
• Deep knowledge of Windows, Linux, and macOS logging and forensic artifacts.
• Integration of threat intelligence into real‑time detection logic.
• Monitoring of cloud IaaS, PaaS, and SaaS environments.

What we offer

• Impactful work protecting organizations globally.
• On‑site collaboration in our Almadina office.
• Continuous growth through certifications and training.
• Ownership mindset with ESOP participation.
• Culture of trust encouraging talent empowerment.