Detection Engineering & Automation Lead

2 hours, 37 minutes ago
Full-time
Lead
Software Development
JustMarkets

JustMarkets

JustMarkets is a leading online trading platform that offers a wide range of financial instruments including Forex, CFDs, Gold, and Oil. With low spreads, high leverage up to 1:3000, and fast execution, JustMarkets provides a next-level trading experie...

Capital Markets
1-10

Description

  • Lead and develop the Detection Engineering & Automation squad, including priorities, mentoring, and delivery of initiatives.
  • Own the detection lifecycle end to end, from use-case definition through testing, tuning, and retirement.
  • Build and maintain SIEM and EDR detection rules, detection-as-code, enrichment workflows, and SOAR playbooks.
  • Collaborate with SOC, Cyber Defense leadership, Incident Response, and engineering teams to reduce false positives and alert noise.
  • Map detections to critical assets, attacker TTPs, telemetry sources, and incident response runbooks.
  • Ensure critical detections have ownership, documentation, and validated testing evidence.
  • Lead security automation initiatives that speed investigations while avoiding unsafe autonomous actions.

Requirements

  • Higher education in Computer Science, Information Security, or a related technical field is preferred.
  • 5+ years of experience in SOC, Detection Engineering, Threat Detection, or Security Automation.
  • 2+ years of hands-on experience in Detection Engineering.
  • 1+ year of experience leading or mentoring a team of engineers.
  • Hands-on experience writing and tuning detection content, including Sigma, YARA, and SIEM correlation rules.
  • Experience with SOAR platforms, automation playbooks, and scripting such as Python or similar.
  • Strong understanding of attacker TTPs, MITRE ATT&CK, telemetry sources, and incident response workflows.
  • Experience defining and tracking Detection Engineering metrics and KPIs such as MTTD, MTTR, false-positive rate, and detection coverage.
  • English at Intermediate+ level.
  • Ukrainian or Russian at Upper-intermediate level.
  • Experience in fintech, brokerage, trading platforms, payments, or other regulated financial environments is a plus.
  • Experience with cloud-native detection across AWS, GCP, and Azure is a plus.
  • Experience with AI/LLM-assisted alert summarization or detection tooling is a plus.
  • Threat intelligence and threat hunting experience with CTI feeds, MISP, Maltego, or similar tools is a plus.
  • Previous experience building a Detection Engineering function from an early maturity stage is a plus.

Benefits

  • 20 paid vacation days per year.
  • 10 paid sick leave days per year.
  • Public holidays according to the company’s approved holiday list.
  • Medical budget.
  • Remote work opportunity.
  • Professional education budget.
  • Language learning budget.
  • Wellness budget covering gym membership, sports gear, and related expenses.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Software Engineer 3

MongoDB 1K-5K Internet Software & Services

MongoDB is hiring a software engineer to build the internal platform, tooling, and evaluation systems that help teams author, validate, monitor, and improve agent skills and behavior.

AWS Azure C# CI/CD GCP GitHub Actions Go Java JavaScript MongoDB Python TypeScript
2 hours, 37 minutes ago

Senior Software Engineer New Markets

Alpaca 51-250 Capital Markets

Alpaca is hiring a Senior Engineer to design and operate the brokerage systems and regional engineering infrastructure that support its global trading platform.

Go gRPC React
2 hours, 37 minutes ago

Senior Software Engineer - Market Data

Alpaca 51-250 Capital Markets

Senior Software Engineer role at Alpaca focused on building and scaling market data systems that power a global brokerage infrastructure used by financial institutions and millions of users.

Agile C C++ CI/CD GCP Go Kubernetes Linux Microservices Rust Scrum Shell Scripting SQL TCP/IP
2 hours, 37 minutes ago

Senior Software Engineer New Markets

Alpaca 51-250 Capital Markets

Alpaca is hiring a Senior Engineer to build and maintain the core brokerage systems and regional engineering operations that support its global financial infrastructure.

Go gRPC Microservices React
2 hours, 37 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers