Senior Information Security Engineer

We are looking for a Senior Information Security Engineer (Detection Engineer) to join a dynamic Security Operations Center (SOC) team within a large enterprise environment. You will play a key role in strengthening cyber defense capabilities by designing, building, and improving detection use cases across macOS and Linux environments, helping to proactively identify and respond to security threats. You will work at the heart of the SOC, where security events are centralized, analyzed, and transformed into actionable insights. Your mission Design, develop, and maintain detection use cases for macOS and Linux systems Analyze security logs (syslog, audit logs, EDR telemetry, etc.) and translate them into meaningful detections Improve and fine-tune existing detection rules to reduce false positives and increase accuracy Collaborate closely with SOC analysts to align detection logic with real-world threat scenarios Contribute to expanding logging and monitoring coverage across systems Use frameworks such as MITRE ATT&CK to structure detection strategies Work with Splunk (training provided)

Strong analytical mindset and structured approach to problem-solving Ability to communicate technical concepts clearly to both technical and non-technical stakeholders Team-oriented, collaborative, and eager to learn in a SOC environment Experience in cybersecurity, threat detection, or strong background as a macOS/Linux systems engineer Knowledge of shell scripting and regex is a plus Familiarity with security monitoring, SOC environments, or SDLC is an advantage Proactive, quality-driven, and comfortable working in a fast-paced environment Nice to have Agile methodology experience Exposure to SIEM tools (Splunk is a plus but not required) What’s offered A supportive SOC team with strong knowledge sharing culture