Job description

Context

We are looking for a Detection Engineer specializing in Mac and Linux environments to actively contribute to protecting our organization and stakeholders against cyber threats. You will play a crucial role within our Security Operations Centre (SOC), where security events are collected, analyzed, and translated into concrete actions. This position focuses on designing and improving detection use cases on Mac and Linux platforms, working primarily with SIEM tools such as Splunk.

Missions

• Design, build, and maintain detection use cases for macOS and Linux platforms


• Analyze security logs (e.g., syslog, audit logs, EDR telemetry) and translate them into actionable detections


• Improve and fine-tune existing use cases to reduce false positives and increase detection quality


• Collaborate with SOC analysts to align detections with real-world th...