Security Engineer, Detection Engineering

About the role

Saronic Technologies is seeking a senior‑level Security Engineer to join its Security Operations team. In this role you will design, build, and maintain high‑fidelity detection content that protects autonomous maritime platforms and corporate infrastructure.

Key responsibilities

• Design, test, and tune detection rules and analytic queries across endpoint, cloud, network, identity, and DLP telemetry.
• Map detection coverage to MITRE ATT&CK, identify gaps, and prioritize new detections based on threat intelligence.
• Engineer correlation, behavioral analytics, and anomaly‑based detections that minimize false positives.
• Own the full detection lifecycle from development through production tuning, monitoring, and retirement.
• Build and operate scalable telemetry pipelines using Terraform and infrastructure‑as‑code practices.
• Design log collection, parsing, and enrichment configurations to ensure high‑quality data for detection.
• Develop and manage automated response playbooks in SOAR platforms and create enrichment automation for alerts.
• Support incident response, translate lessons learned into improved detections, and collaborate with SOC analysts, Cloud Security, Product Security, and IT teams.

Required profile

• Senior‑level security professional with strong detection engineering experience.
• Ability to think in terms of adversary behavior and telemetry coverage.
• Experience owning detections end‑to‑end, from gap identification to production validation.

Required skills

• Detection‑as‑code practices (version‑controlled logic, automated testing, CI/CD).
• MITRE ATT&CK framework mapping.
• Terraform and infrastructure‑as‑code deployment.
• SOAR platform playbook development.
• Log collection, parsing, and enrichment.
• Correlation rules, behavioral analytics, and anomaly detection.

What we offer

• Opportunity to work on cutting‑edge autonomous maritime security solutions.
• Collaborative environment with cross‑functional security teams.
• Access to diverse telemetry sources spanning cloud, embedded platforms, and OT.