Rule Detection Engineer - SOC

Are you ready to dive into the world of cybersecurity with a dynamic and impactful role? Join our Customer Delivery Unit team within Security Operations!

DNV Cyber is a leading cybersecurity services provider, formed by merging Nixu, Applied Risk and DNV in 2024. At DNV Cyber we take pride in safeguarding what’s critical to our customers and all of us as individuals – from personal data to industrial safety systems. We use our expertise and scale to tackle the most difficult cyber issues in multiple industries that are critical to society.

The role in short

As a Detection Engineer, your primary responsibility will be developing and implementing advanced detection capabilities to bolster our clients' security defenses, for example by creating both logic-based and more sophisticated ML-based detection rules for Security Information and Event Management (SIEM) and Extended detection and response (XDR) products. Furthermore, you will participate in developing innovative tools and automated solutions to enhance the effectiveness of our SOC operations.

What we're looking for

We are seeking a talented individual with previous experience working with security tools such as Microsoft Sentinel and XDR, Splunk, or similar technologies. Your experience is complemented by proficient skills in programming and query languages (e.g. Python and/or KQL).

You will be working as part of a team of security professionals with the purpose of delivering high-end services to our clients. This requires customer communication and understanding on how to provide value in cyber security to our clients .

Of course, a genuine passion for the cybersecurity field and an eagerness to learn are essential. We recognize your potential in specific areas that align with your expertise and contribute significantly to the team's success.

#DNVCyber

#LI-Hybrid

You have the following

- Customer communication skills with ability to create customer value in the area of cyber security
- Experience with SIEM and XDR technologies such as Microsoft security stack. Experience with other similar SIEM and/or XDR systems is appreciated too
- Exposure to data engineering concepts (e.g. data collection, data lakes, ETLs, ML Ops, etc.) is appreciated
- Experience with at least one scripting and programming language (e.g. Python or Powershell) and/or experience in writing queries with a query language (e.g. KQL)
- Genuine Passion for Cybersecurity: While previous experience in cybersecurity is not mandatory, the candidate must demonstrate a genuine passion for the field and a strong interest in staying up to date with the latest trends and emerging threats
- Innovative Problem-Solving Skills, Adaptability and Collaboration is appreciated
- Fluent skills in English

Desired but not required:

- Experience with Git-based CI/CD pipelines, IaC (Infrastructure as Code), and DaC (Detection as Code)
- Experience in working in or in cooperation with a Security Operation Center (SOC)
Security and compliance with statutory requirements in the countries in which we operate is essential for DNV. Background checks will be conducted on all final candidates as part of the offer process, in accordance with applicable country-specific laws and practices.