Описание: We are looking for a Detection Engineer to join the Security team and help build and enhance our capabilities for detecting and responding to threats across web applications, mobile applications, APIs, and supporting services. This role sits at the intersection of Security Engineering, Software Development, and AI-driven Security Operations. You will develop and tune security detections, improve the telemetry that powers them, enhance AI-assisted alert triage capabilities, and build safe, scalable response automation.
Задачи: Design, build, test, and maintain security detections and anomaly detection capabilities within SIEM platforms. Develop detection coverage for threats including: Account takeover, Automated abuse and bot activity, Enumeration attacks, Authentication and session misuse, Access control failures, Suspicious access to sensitive data. Collaborate with Product, Engineering, and Platform teams to improve logging, telemetry quality, event coverage, and attribution. Build and enhance AI-powered triage capabilities, including: Agent workflows, Tool integrations, Context enrichment, Escalation logic, Decision quality measurement. Design and implement incident response workflows and investigation playbooks. Develop security automation that safely enriches, routes, and responds to security events. Implement automation controls including approvals, auditability, monitoring, rollback mechanisms, and failure handling. Continuously evaluate detection effectiveness, investigate gaps, reduce false positives, and improve operational outcomes using responder feedback. Apply software engineering best practices including version control, testing, backtesting, and staged deployments.
Требования: Experience building or operating production software or security systems. Hands-on experience with: SIEM platforms, Detection engineering, Security analytics, Alert tuning. Strong understanding of web, mobile, and API security threats. Proficiency in at least one modern programming language such as: Python, Go, Java. Experience building, integrating, or extending AI agents and LLM-powered applications. Knowledge of: Agent orchestration, Tool integrations, Context enrichment, LLM evaluation, AI safety controls. Strong understanding of logging, telemetry, event schemas, and data quality. Experience designing and deploying automation in secure production environments. Excellent communication skills with the ability to collaborate across Security, Engineering, and Platform teams.
Будет плюсом: Behavioural analytics and anomaly detection
Machine learning applied to security use cases
Security orchestration and automated response (SOAR)
Incident response and containment workflows
Web and mobile application security testing
Threat hunting and security investigations
Infrastructure as Code (IaC)
CI/CD and modern DevOps practices
Условия: Hourly rate: €100 - €130
Duration: 12 months
Hybrid: 2 days per week
Start: ASAP
Security engineer in threat detection in Amsterdam werkgever: Salt
Als Senior Software Engineer bij ons in Amsterdam krijg je de kans om te werken aan innovatieve, schaalbare systemen met een focus op AI en moderne cloud-technologieën. We bieden een stimulerende werkomgeving waar samenwerking en persoonlijke groei centraal staan, met mogelijkheden om junior engineers te mentoren en je technische vaardigheden verder te ontwikkelen. Geniet van een hybride werkmodel dat flexibiliteit biedt, terwijl je bijdraagt aan baanbrekende projecten in een dynamisch team.
