Detection Engineering Lead

Cabot Corporation (NYSE: CBT) is a leading global specialty chemicals and performance materials company headquartered in Boston, Massachusetts, USA.

Our businesses deliver a broad range of products and solutions to customers in every corner of the globe, serving the transportation, infrastructure, environment and consumer industry sectors. We bring the power of innovative chemistry to solve customers' challenges today while preparing them to meet tomorrow’s needs. Our commitment to innovation is driven by a passion to advance our customers' businesses through our deep understanding of their applications and the global trends that impact their operations.

If you do not meet every requirement, or your experience is slightly different that what we have listed, we still encourage you to apply! 

Your Role at Cabot

As the Detection Engineering Lead, you will design, build, and continuously improve Cabot’s threat detection capabilities. Working in a hybrid model with internal teams and an external managed detection partner, you will help ensure security threats are identified quickly and effectively across our global manufacturing environment.

You will lead the development of detection content, improve monitoring capabilities, and help shape the future of cybersecurity operations at Cabot.

This role reports to the Cybersecurity Operations Services Manager.

How You Will Make an Impact

• Lead the design, development, testing, and improvement of security detection content across Cabot’s monitoring platforms.
• Continuously improve detection capabilities to increase visibility and reduce security risk.
• Define and maintain telemetry and logging requirements needed for effective threat detection.
• Work with internal teams and external security providers to improve detection quality and operational effectiveness.
• Support threat hunting, incident response, and investigations by providing detection expertise and insights.
• Develop and maintain threat-informed detection strategies aligned with frameworks such as MITRE ATT&CK.
• Promote detection engineering best practices, including version control, testing, peer reviews, and automation.
• Track and report on detection coverage, effectiveness, and key performance metrics.

What You Will Bring to Cabot

• 5+ years in security operations, detection engineering, or threat detection, with clear depth in detection content development.
• Deep hands-on expertise with a major enterprise SIEM (for example Splunk, Microsoft Sentinel, Elastic, Trellix, QRadar, or equivalent).
• Proven detection-content development and tuning at scale.
• Strong command of MITRE ATT&CK, log pipelines, and threat detection methodology.
• Experience working alongside or governing a managed detection provider (MDR / MSSP).
• Scripting and query fluency (Python, a SIEM query language such as KQL or SPL, and regex).
• Excellent written and spoken English; this is our working language across a global team.

Experience That Strongly Aligns

• Global industrial, manufacturing, or OT-adjacent environments.
• Security platform migration or consolidation programs.
• Maturing or scaling a detection engineering capability.

Additional Experience (Nice to Have)

• Industry certifications: GCDA, GCIA, GCDN, Splunk or Sentinel certifications, OSCP.
• Familiarity with security frameworks (NIST CSF, MITRE ATT&CK).

Measures of Success

• MITRE ATT&CK coverage of relevant techniques.
• Improvement in mean time to detect and respond (MTTD / MTTR).
• Reduction in false-positive rate and analyst noise.
• Successful platform onboarding and tuning milestones.
• Quality of partner escalations measured against the defined bar.

Additional Information

• Working hours: 9:00–17:30. Occasional flexibility outside standard working hours may be needed to support critical cybersecurity initiatives, major platform changes, or incident response activities.
• Permanent contract.
• Salary: EUR 2,700–3,900 gross per month. The final salary offer will depend on the candidate’s previous experience and qualifications.​
• Health insurance from the first day of employment.
• Monthly allowance and annual bonus.
• Hybrid work schedule: 3 days on site and 2 days working from home.

How We’ll Support Your Success:

• Dynamic, Flexible, Hard Working, Team Environment– We are busy, collaborative, growing, and we are doing really meaningful work.
• Hybrid Work Environment– The autonomy to both work from home 2 days a week and develop/sustain colleague relationships in the office 3 days a week.
• Benefits, Vacation, Etc.– We offer a competitive package of benefits.
• Feedback– we are committed to giving and receiving feedback in a direct and open fashion.
• Support– you are part of a team and deserve to feel encouraged and supported. You will be part of a team that cares about you personally and professionally. Our success depends on your success.

#LI-HYBRID

At Cabot, we bring the power of innovative chemistry and a spirit of partnership with our customers to advance solutions that will enable a sustainable future. Our strength in research and development is a major reason why we have been an industry leader for more than 135 years in products such as reinforcing and specialty carbons, battery materials, aerogel, fumed metal oxides, inkjet colorants, masterbatches and conductive compounds.

Our employees around the world are united by our shared purpose: Creating materials that improve daily life and enable a more sustainable future. Through our corporate strategy, “Creating for Tomorrow,” we are focused on our core strengths to lead in performance and sustainability – today and into the future.