Detection Engineer

Join Darktrace, a leading cybersecurity company, as a Detection Engineer. In this role, you will work on the continuous development of our threat detection model deck, respond to customer requests and incidents, and review and process cyber threat intelligence. You will collaborate with various stakeholders, develop and enhance internal tooling and processes, and have the opportunity to make a significant impact in the field of cybersecurity.

Responsibilities

• Contribuer au développement continu du modèle de détection des menaces et à la création de nouveaux modèles pour des domaines tels que l'Endpoint et Kubernetes.
• Répondre aux demandes des clients et aux incidents de cybersécurité, en priorisant les problèmes sensibles au temps et de haute priorité.
• Analyser en profondeur les incidents de cybersécurité pour identifier les domaines d'amélioration du modèle de détection.

Requirements

• Familiarity with a range of Darktrace products, including Network, Identity, Cloud, Response, Endpoint
• Strong analytical skills, and an ability to solve problems creatively
• To be suited for the role, you must have hands-on experience using the Darktrace product suite to carry out thorough investigations, analysing model alerts and associated traffic/activity in depth
• You will also be expected to be able to work independently, pro-actively and be self-driven; you will be responsible for driving improvement of the model deck
• You should also have some experience with the Platform model editor, e.g. assisting customers with creating custom models, or tuning existing models
• Knowledge of basic cybersecurity concepts, and a passion for staying up-to-date on the latest cybersecurity trends
• Strong time management and prioritisation skills
• Experience working with endpoint based security platforms
• Experience building detections with endpoint telemetry
• Experience in any programming language

Preferred

• Experience working with Gitlab