Detection Engineer – Cyber Defense

About the role

The Detection Engineer joins Philips' Cyber Defense Capabilities team to design, implement and continuously validate detection capabilities for the CSIRT. You will build high‑fidelity detection logic, run regression tests and conduct breach and attack simulations to keep pace with evolving adversary techniques.

Key responsibilities

• Develop, test and maintain detection rules, signatures and correlation logic in SIEM platforms such as Splunk and Microsoft Sentinel.
• Perform regression testing after system updates to ensure detection accuracy and resilience.
• Execute breach and attack simulations (BAS) linked to threat intelligence and MITRE ATT&CK techniques.
• Integrate threat intelligence feeds, IOCs and behavioral patterns into detection workflows.
• Automate enrichment, correlation and triage using SOAR playbooks and custom scripts.
• Collaborate with incident response, threat hunting and purple‑team exercises to close detection gaps.

Required profile

• Bachelor’s degree in Cybersecurity, Computer Science or related field.
• Minimum 2 years of experience in security architecture, network security or related cybersecurity roles.
• Hands‑on experience with SIEM platforms, detection engineering and log parsing.
• Familiarity with AI/ML concepts applied to security analytics.
• Experience with cloud environments (AWS, Azure, GCP) and associated security telemetry.

Required skills

• SIEM platforms – Splunk, Microsoft Sentinel
• Detection engineering, log parsing, data normalization
• Python, PowerShell scripting
• MITRE ATT&CK framework mapping
• Adversary simulation tools – AttackIQ, Caldera
• Cloud security telemetry – AWS, Azure, GCP, Aliyun
• SOAR platforms and automation development
• Container and serverless security – Kubernetes, serverless environments

What we offer

• Base salary range €61,200 – €101,900 per year, plus 3% short‑term incentive.
• Hybrid working model (minimum 3 days onsite per week).
• Paid time‑off, health and wellbeing benefits.
• Learning and development opportunities.