Security Detection Engineer

Security Detection Engineer

Remote — European Union. Company based in Helsinki, Finland.

12-month Contract

Our client, a growing Cybersecurity SaaS company based in Helsinki , is looking for a Security Detection Engineer to develop and improve threat-detection rules, security telemetry, and monitoring capabilities across cloud and enterprise environments.

You'll work at the intersection of CyberSecurity, Detection Engineering, and Security Automation , building reliable detection logic and monitoring solutions that help security teams identify suspicious activity and respond to threats more effectively.

Core Skills

• 3+ years in Detection Engineering, Security Engineering, Security Operations, or a similar role

• Python scripting and automation

• SIEM platforms and security monitoring

• AWS security fundamentals

• Detection Engineering

• Sigma detection rules

• Security logs and telemetry analysis

• MITRE ATT&CK framework

• Experience developing or improving threat-detection use cases

• Understanding of common attack techniques and security events

Nice to Have

Splunk / Microsoft Sentinel / Elastic Security

AWS CloudTrail / CloudWatch

AWS GuardDuty / Security Hub

KQL / SPL

Sigma rule conversion and validation

YARA

Endpoint Detection & Response (EDR)

Threat hunting

Threat intelligence integration

Detection-as-Code

Git / CI/CD for detection rules

SOAR platforms

Cloud identity and access monitoring

Network security telemetry

Experience supporting SOC or incident response teams