Senior Detection Engineer / Threat Detection Lead

About the role

We are seeking an experienced security professional to lead and expand our threat detection capabilities within a critical financial services environment. This hands‑on position offers full ownership of detection design, threat hunting, and continuous security improvement, while also providing opportunities to influence the broader security community.

Key responsibilities

• Design, build, and maintain detection rules across SIEM and XDR platforms, managing the full lifecycle from creation to retirement.
• Conduct gap analyses against MITRE ATT&CK TTPs to identify coverage blind spots.
• Lead incident response activities, including containment, investigation, and remediation.
• Run purple‑team exercises and breach‑and‑attack simulations to validate detection coverage.
• Develop a Detection‑as‑Code framework with CI/CD pipelines, version control, and automated SOAR playbooks.
• Translate threat intelligence feeds into actionable detections and support red‑team, TIBER, and DORA testing.
• Contribute to incident‑response plan development, tabletop exercises, and knowledge sharing within industry groups.

Required profile

• Several years of hands‑on experience in detection engineering, SOC, or CSIRT roles.
• Proven ability to lead a team or functional working group.
• Fluent in Dutch, English, and French.
• Active participation in the security community is a strong differentiator.

Required skills

• SIEM platforms (Microsoft Sentinel, Splunk, QRadar, or similar).
• XDR platforms.
• SOAR playbook development and automation pipelines.
• MITRE ATT&CK framework.
• Python scripting for automation and tooling.
• CI/CD pipelines and version‑control systems (e.g., Git).
• Threat hunting, forensics, and L2/L3 incident handling.
• Detection‑as‑Code concepts.

What we offer

• Freelance engagement with a competitive rate of €95‑€100 per hour.
• Hybrid work model (2 days onsite in Brussels, 3 days remote).
• Opportunity to shape security strategy for critical infrastructure.