Detection Engineering & Automation Lead

4 weeks, 1 day ago
Full-time
Lead
Software Development
JustMarkets

JustMarkets

JustMarkets is a leading online trading platform that offers a wide range of financial instruments including Forex, CFDs, Gold, and Oil. With low spreads, high leverage up to 1:3000, and fast execution, JustMarkets provides a next-level trading experie...

Capital Markets
1-10

Description

  • Lead and develop the Detection Engineering & Automation squad, including priorities, mentoring, and delivery of initiatives.
  • Own the detection lifecycle end to end, from use-case definition through testing, tuning, and retirement.
  • Build and maintain SIEM and EDR detection rules, detection-as-code, enrichment workflows, and SOAR playbooks.
  • Collaborate with SOC, Cyber Defense leadership, Incident Response, and engineering teams to reduce false positives and alert noise.
  • Map detections to critical assets, attacker TTPs, telemetry sources, and incident response runbooks.
  • Ensure critical detections have ownership, documentation, and validated testing evidence.
  • Lead security automation initiatives that speed investigations while avoiding unsafe autonomous actions.

Requirements

  • Higher education in Computer Science, Information Security, or a related technical field is preferred.
  • 5+ years of experience in SOC, Detection Engineering, Threat Detection, or Security Automation.
  • 2+ years of hands-on experience in Detection Engineering.
  • 1+ year of experience leading or mentoring a team of engineers.
  • Hands-on experience writing and tuning detection content, including Sigma, YARA, and SIEM correlation rules.
  • Experience with SOAR platforms, automation playbooks, and scripting such as Python or similar.
  • Strong understanding of attacker TTPs, MITRE ATT&CK, telemetry sources, and incident response workflows.
  • Experience defining and tracking Detection Engineering metrics and KPIs such as MTTD, MTTR, false-positive rate, and detection coverage.
  • English at Intermediate+ level.
  • Ukrainian or Russian at Upper-intermediate level.
  • Experience in fintech, brokerage, trading platforms, payments, or other regulated financial environments is a plus.
  • Experience with cloud-native detection across AWS, GCP, and Azure is a plus.
  • Experience with AI/LLM-assisted alert summarization or detection tooling is a plus.
  • Threat intelligence and threat hunting experience with CTI feeds, MISP, Maltego, or similar tools is a plus.
  • Previous experience building a Detection Engineering function from an early maturity stage is a plus.

Benefits

  • 20 paid vacation days per year.
  • 10 paid sick leave days per year.
  • Public holidays according to the company’s approved holiday list.
  • Medical budget.
  • Remote work opportunity.
  • Professional education budget.
  • Language learning budget.
  • Wellness budget covering gym membership, sports gear, and related expenses.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Senior Software Engineer, Full Stack

Scout Motors 51-250 Automotive

Scout Motors is hiring a Senior Software Engineer for its Servicing & Repairs digital products team to design, build, and deliver scalable software systems supporting vehicle and customer services.

Angular AWS Azure CSS Go HTML Java JavaScript Microservices MongoDB MySQL Node.js PostgreSQL Python React React Native Redis REST API Ruby Swift TypeScript Vue.js
1 hour, 35 minutes ago

Interview Engineer (United Arab Emirates)

Karat 251-1K Internet Software & Services

Karat is building a global community of contractor Interview Engineers to facilitate objective technical interviews and evaluate software developers through its interview platform.

1 hour, 50 minutes ago

Senior Software Engineer (Full Stack)

3Pillar Global 1K-5K Internet Software & Services

3Pillar Global is hiring a senior software engineer to deliver secure, scalable enterprise web and mobile solutions for clients across industries, from architecture and development through deployment.

Agile AWS Docker Encryption Express.js Jest Jetpack Compose Kotlin Kubernetes Microservices Node.js Oracle OWASP PostgreSQL React React Native REST API Serverless SQL SQLite SQL Server Swift SwiftUI TypeORM TypeScript
1 hour, 50 minutes ago

Principal Software Engineer

Research Innovations 251-1K Aerospace & Defense

Research Innovations, Inc. is seeking a Principal Software Engineer to develop electromagnetic warfare and spectrum operations capabilities for its MAX Tactical Command & Control platform supporting government and military customers.

Agile C# Docker Java Kubernetes Python REST API SQL
2 hours, 5 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers