Senior Detection Engineer
Role Overview
We are seeking an experienced Senior Detection Engineer to lead the design, development, and maturity of enterprise threat detection capabilities within a sophisticated cyber security environment.
This role will be responsible for establishing and driving a threat-informed detection engineering program that aligns with organizational risks, intelligence requirements, and regulatory obligations. The successful candidate will play a critical role in developing advanced detection content, improving security monitoring effectiveness, and enabling proactive identification of emerging threats.
The ideal candidate will possess deep expertise in Detection Engineering, Threat Detection, Microsoft Sentinel, IBM QRadar, Threat Intelligence, MITRE ATT&CK, and Security Monitoring, with the ability to combine strategic leadership and hands-on technical delivery.
Key Responsibilities
Detection Engineering Leadership
- Establish and develop a mature detection engineering function, operating model, and capability roadmap.
- Define standards, development processes, governance controls, and quality frameworks for detection content.
- Lead and mentor detection engineers and security analysts.
- Present detection strategies, risk-based recommendations, and coverage assessments to senior stakeholders.
Intelligence-Driven Detection
- Transform threat intelligence into prioritized detection requirements.
- Develop detections aligned with current threat actors, attack campaigns, insider threats, and emerging risks.
- Collaborate closely with Threat Intelligence, Threat Hunting, Red Team, and Incident Response teams.
- Ensure intelligence findings are translated into operational detection capabilities.
Threat Detection Development
Threat Coverage & Validation
Governance & Performance Management
Required Skills & Qualifications
- 8+ years of cybersecurity experience with at least 4 years focused on Detection Engineering or Threat Detection.
- Proven experience building or leading enterprise detection engineering functions.
- Expert knowledge of:
- Microsoft Sentinel
- IBM QRadar
- Threat Detection Engineering
- Security Monitoring
-
Threat Intelligence Integration
-
Strong expertise with:
- KQL
- AQL
- Detection-as-Code
- Git Repositories
-
CI/CD Pipelines
-
Deep understanding of:
- MITRE ATT&CK
- MITRE D3FEND
- NIST Cybersecurity Framework (CSF)
- Cyber Kill Chain
- Pyramid of Pain
-
Diamond Model
-
Experience developing advanced detections across:
- Windows
- Linux
- Azure
- Microsoft 365
- Identity Services
-
Network Security Platforms
-
Strong scripting capabilities in:
- Python
-
PowerShell
-
Excellent communication, leadership, and problem-solving skills.
Preferred Skills & Experience
Certifications
Preferred
- * GIAC GCDA
- GIAC GCIA
- GIAC GCTI
- GIAC GCIH
- GIAC GREM
- Microsoft SC-200
- IBM QRadar Certifications
- CISSP
- OSCP
Education & Qualifications
- * Bachelor's degree in Computer Science, Information Security, Engineering, or a related discipline.
- Relevant cybersecurity, threat detection, and security engineering certifications are highly desirable.
Halian Group
With over 28 years of experience, we have come to understand that innovation is the only way to provide agile, practical solutions that transform businesses and careers. Our resourcing and smart services help you to realise tomorrow's potential. Discover the amazing things possible when you bring the right people and the right technologies together.
At Halian, we recognise that diversity, equity, and inclusion (DEI) are essential to building high-performing teams for our clients. We are committed to connecting organisations with top talent from all backgrounds, ensuring that every individual feels valued, respected, and empowered to contribute their unique perspectives.
We encourage applications from all qualified candidates, regardless of race, gender, disability, or any other characteristic that makes them unique.
Senior Detection Engineer - Banking in Abu Dhabi, United Arab Emirates
