Duration: 12 months
Start: ASAP
We are looking for a Detection Engineer to join the Security team and help build and enhance our capabilities for detecting and responding to threats across web applications, mobile applications, APIs, and supporting services.
This role sits at the intersection of Security Engineering, Software Development, and AI-driven Security Operations. You will develop and tune security detections, improve the telemetry that powers them, enhance AI-assisted alert triage capabilities, and build safe, scalable response automation. The ideal candidate combines strong security analytics expertise with hands‐on software engineering skills and experience working with AI-powered systems .
Responsibilities
Design, build, test, and maintain security detections and anomaly detection capabilities within SIEM platforms.
Develop detection coverage for threats including:
Account takeover
Automated abuse and bot activity
Authentication and session misuse
Access control failures
Suspicious access to sensitive data
Collaborate with Product, Engineering, and Platform teams to improve logging, telemetry quality, event coverage, and attribution.
Build and enhance AI-powered triage capabilities, including:
Tool integrations
Decision quality measurement
Design and implement incident response workflows and investigation playbooks.
Develop security automation that safely enriches, routes, and responds to security events.
Implement automation controls including approvals, auditability, monitoring, rollback mechanisms, and failure handling.
Continuously evaluate detection effectiveness, investigate gaps, reduce false positives, and improve operational outcomes using responder feedback.
Apply software engineering best practices including version control, testing, backtesting, and staged deployments.
Required Skills & Experience
Experience building or operating production software or security systems.
Hands-on experience with:
SIEM platforms
Security analytics
Strong understanding of web, mobile, and API security threats.
Proficiency in at least one modern programming language such as:
Python
Go
Java
Experience building, integrating, or extending AI agents and LLM-powered applications.
Knowledge of:
Agent orchestration
Tool integrations
LLM evaluation
AI safety controls
Strong understanding of logging, telemetry, event schemas, and data quality.
Experience designing and deploying automation in secure production environments.
Excellent communication skills with the ability to collaborate across Security, Engineering, and Platform teams.
Behavioural analytics and anomaly detection.
Machine learning applied to security use cases.
Security orchestration and automated response (SOAR).
Incident response and containment workflows.
Web and mobile application security testing.
Threat hunting and security investigations.
Security Engineer (Detection) in Amsterdam werkgever: Salt
Als Senior Software Engineer bij ons in Amsterdam krijg je de kans om te werken aan innovatieve, schaalbare systemen met een focus op AI en moderne cloud-technologieën. We bieden een stimulerende werkomgeving waar samenwerking en persoonlijke groei centraal staan, met mogelijkheden om junior engineers te mentoren en je technische vaardigheden verder te ontwikkelen. Geniet van een hybride werkmodel dat flexibiliteit biedt, terwijl je bijdraagt aan baanbrekende projecten in een dynamisch team.
