Security Engineer
Job Description
Security Engineer - Detection Engineering
Setup:
Remote
Schedule:
UAE hours, Monday to Friday (8 hours per day)
Contract Duration:
Initial 6 months
As a
Security Engineer – Detection Engineering
, you will be responsible for building, tuning, and maintaining high-quality security detections that identify threats early and accurately. You will work closely with security and engineering teams to enhance visibility and reduce risk across the organization.
Key Responsibilities
- Design, develop, and maintain
security detections
across cloud, endpoint, and identity platforms - Build and tune detection rules, alerts, and use cases to identify malicious or suspicious activity
- Utilize telemetry and logs from tools such as
Chronicle, AWS, CrowdStrike, Google SecOps, JumpCloud, and Okta - Continuously improve detection coverage using threat intelligence and attacker techniques (e.g., MITRE ATT&CK)
- Collaborate with Incident Response and SOC teams to validate and refine detections
- Analyze security events and contribute to incident investigations and post-incident improvements
- Automate detection workflows and improve signal-to-noise ratio
- Document detection logic, playbooks, and response procedures
Qualifications & Experience
- 3–5+ years of experience
in Security Engineering, Detection Engineering, or SOC-related roles - Strong hands-on experience in Detection Engineering
(crucial requirement) - Experience working with one or more of the following technologies:
- Chronicle
- AWS (security services)
- CrowdStrike
- Google SecOps
- JumpCloud
- Okta
- Solid understanding of cloud, identity, and endpoint security
- Experience creating and tuning detection rules and alerts
- Familiarity with threat frameworks such as
MITRE ATT&CK - Scripting or automation experience (Python, Bash, etc.) is a plus
- Strong analytical, communication, and collaboration skills