Threat Intelligence Engineer

Senior Cyber Threat Intelligence / Detection Engineer | Luxembourg | 3 Month Rolling Contract | ASAP Start

I'm currently looking for a Senior Cyber Threat Intelligence / Detection Engineer to join a major international organisation in Luxembourg on an initial 3 Month contract , with an ASAP start.

This is a hands on role sitting at the intersection of Threat Intelligence, SIEM, Detection Engineering, Threat Hunting and Incident Response .

You'll be helping strengthen the organisation's security monitoring capability by turning threat intelligence and security telemetry into actionable detections, alerts and response processes .

What you'll be doing:

• Design and improve SIEM detection use cases and correlation rules
• Analyse security alerts, incidents and high volume log data
• Manage and assess threat intelligence feeds and sources
• Develop and maintain log sources across on-premise and cloud environments
• Build dashboards and reporting around security incidents and emerging threats
• Perform threat hunting using MITRE ATT&CK
• Develop and maintain detection logic / detection-as-code
• Support real-time incident triage and investigation
• Analyse endpoint and identity based threats
• Help develop and improve incident response playbooks
• Work closely with Security Operations and wider Digital Services teams
• Communicate technical findings clearly to both technical and non-technical stakeholders

Experience we're looking for:

You'll ideally have strong hands on experience across:

SIEM / Security Monitoring

• Splunk, Microsoft Sentinel, QRadar, ArcSight, Elastic or similar

Threat Detection & Hunting

• MITRE ATT&CK
• Detection engineering
• Threat hunting
• Correlation rules / detection logic
• APT tactics and common attack techniques

Endpoint & Incident Response

• EDR/XDR technologies
• Incident triage
• Endpoint and identity threats
• Root cause analysis
• Containment and response

You'll also need a good general understanding of:

• Network protocols
• Windows & Linux
• Cloud security
• Containerisation risks
• High volume application logs

A CompTIA Security+, GSEC or equivalent qualifications would be advantageous, although relevant practical experience will also be considered.

If you're a Senior Threat Hunter, Detection Engineer, SIEM Engineer, CTI Specialist or Security Operations Engineer looking for an interesting international contract in Luxembourg, I'd be keen to speak.

Message me directly or apply below for more information.