🇳🇱 Utrecht, Netherlands · 19h ago
Detection Quality Engineer
Northwave Cyber Security
LinkedInEnglish-friendly
Job DescriptionAttackers innovate every day. So do we.At Northwave, we believe effective cybersecurity starts long before an incident occurs. Our Detection, Quality & Stack (DQS) team is responsible for the technical foundation of our SOC, building and maintaining the detections, tooling and automation that protect organizations across the Netherlands and Europe.We're looking for a Detection Quality Engineer (Medior/Senior) who turns threat intelligence, attack research and adversary behavior into detections that make a real-world impact. If attack chains, KQL, Purple Teaming and threat hunting get you excited, this role was built for you.What You'll Be DoingDesign, build and continuously improve detection rules and monitoring content in Microsoft Sentinel, Defender and other security platformsTranslate attack techniques, adversary behavior and threat intelligence (MISP, CERT advisories, Red Team exercises) into actionable, well-tuned detectionsMap threats to frameworks like MITRE ATT&CK and the Cyber Kill Chain, and proactively close monitoring gapsContribute to Purple Team initiatives, detection coverage validation and strategic projects that scale our MDR servicesWork closely with analysts, engineers, threat intel specialists and Red Team members, and explain detection logic to technical and non-technical stakeholders alikeJob RequirementsWhat you bring3+ years in cybersecurity with a strong focus on detection engineering, monitoring or detection rule development, within an EDR, XDR or SIEM environmentStrong KQL skills, solid understanding of Microsoft Defender and hands-on experience with Microsoft SentinelKnowledge of attack chains, adversary TTPs and the modern threat landscapeExperience with Suricata rules or Zeek scripts, scripting or programming (Python preferred), and solid Windows and Linux internals knowledgeAnalytical, proactive and a strong communicator, comfortable working independently while engaging stakeholders across teamsExtra points if you havePurple Teaming or MITRE ATT&CK experienceExperience validating detections against real attack simulationsBackground in MDR, SOC or Incident ResponseKnowledge of detection-as-code or experience automating security workflowsWho You'll JoinYou'll become part of the Detection Quality team, a highly technical group of engineers responsible for the detections behind our SOC. Our values: quality first, continuous improvement, efficiency through automation, ownership, and customer impact.What We OfferCompetitive salary, paid on the 25th, with annual review and 8% holiday allowancePension via Nationale Nederlanden, Northwave pays 50%, including partner pension25 vacation days plus all national holidays, and generous special leave for marriage, birth, bereavement, care and pregnancyLease car based on salary scale (electric included), or €0.25/km plus 50% lease budget as a mobility allowanceMacBook, phone and accessories fully provided, plus €200 net annual allowance for flexible and remote workingAlleo budget for sports, wellness and leisure, plus a training budgetReferral bonus for bringing in a new colleagueHybrid working from a modern office in Utrecht, with personal growth central through the Role Model and FeedForward cycleWe challenge each other, support each other and continuously push our detection capabilities to the next level.Interested in building systems that are used under real pressure, not in theory? Contact Youri Roelofs at youri.roelofs@northwave-cybersecurity.com .Sourced from LinkedIn. Relocantly aggregates public job postings; apply on the original site.