Detection Engineer

As a Detection Engineer, you will be working in a small, global team, working on the continuous development of our threat detection model deck, whilst responding to customer requests and incidents, and reviewing and processing cyber threat intelligence.

You will be expected to:

Work on building out new model decks to cover areas such as Endpoint and Kubernetes

Address customer queries and respond to cyber incidents, prioritising time-sensitive and high-priority issues

Analyse cybersecurity incidents in depth, to be able to identify areas for improvement of the model deck

Self-drive development of new models, and identify areas for improvement of existing models

Collaborate with various stakeholders within Darktrace, such as Development, Analyst, and customer-facing teams

Develop and enhance internal tooling and processes

To be suited for the role, you must have hands-on experience using the Darktrace product suite to carry out thorough investigations, analysing model alerts and associated traffic/activity in depth.

You should also have some experience with the Platform model editor, e.g. assisting customers with creating custom models, or tuning existing models.

You will also be expected to be able to work independently, pro-actively and be self-driven; you will be responsible for driving improvement of the model deck.

Other prerequisites for the role:

Familiarity with a range of Darktrace products, including Network, Identity, Cloud, Response, Endpoint

Knowledge of basic cybersecurity concepts, and a passion for staying up-to-date on the latest cybersecurity trends

Strong analytical skills, and an ability to solve problems creatively

Strong time management and prioritisation skills

Beneficial skills:

Experience working with endpoint based security platforms

Experience building detections with endpoint telemetry

Experience working with Gitlab

Experience in any programming language