> Markdown version of [/jobs/ext/2669767-cyber-detection-engineering-lead](https://www.wearedevelopers.com/jobs/ext/2669767-cyber-detection-engineering-lead). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cyber Detection Engineering Lead - **Company:** Tesat-Spacecom GmbH & Co. KG - **Location:** München, Germany - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Software System Penetration Testing, Cyber Security, Computer Telephony Integration, Linux, Intrusion Detection and Prevention, Python (Programming Language), Data Logging, Cyber Threat Analysis, Information Technology - **Published:** September 1, 2026 - **Apply:** https://ag.wd3.myworkdayjobs.com/wday/cxs/ag/global/job/Mnchen-Area/Cyber-Detection-Engineering-Lead--d-f-m-_JR10428030 ## About the Role * Degree in Computer Science, Cybersecurity, Information Technology, or equivalent practical experience. * Proven track record in developing use cases and detection logic within a Security Operations Center (SOC) environment, including leadership or mentorship experience. * Strong proficiency in Python and hands-on experience with automation frameworks to streamline operations. * Deep technical expertise in Windows and Linux operating systems, including OS internals, system logging, and telemetry analysis. * Practical background in Red Teaming, Penetration Testing, or an offensive mindset to anticipate attacker methodologies. * Advanced expertise with the MITRE ATT&CK® framework and Detection-as-Code concepts. * Strong communication skills with an empathetic, collaborative approach to leading cross-functional teams and technical initiatives., This job requires an awareness of any potential compliance risks and a commitment to act with integrity, as the foundation for the Company's success, reputation and sustainable growth. ## Description * Lead Detection Strategy: Define the long-term vision for detection engineering, aligning technical roadmaps with organizational risk profiles while standardizing the development lifecycle. * Engine & Rule Lifecycle Management: Architect, develop, maintain, and optimize high-fidelity detection rules for the SOC while expanding framework coverage against MITRE ATT&CK® and Sigma standards. * Threat Intelligence Translation: Analyze Cyber Threat Intelligence (CTI) and translate complex TTPs into proactive, resilient detection logic. * Automation & Orchestration: Drive "Detection-as-Code" initiatives and engineer automated response playbooks to streamline incident response and minimize manual intervention. * Technical Mentorship & Escalation: Act as the primary escalation point for complex technical issues, mentoring junior detection engineers and SOC analysts. * Cross-Functional Collaboration: Partner closely with Incident Response and SOC teams to ensure deployment of context-rich detections that enable rapid threat containment. ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) ## Related Articles - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Finding IT & Technology English-speaking Jobs in Germany ](https://www.wearedevelopers.com/magazine/446-finding-it-technology-english-speaking-jobs-in-germany) - [IT Salaries in Germany](https://www.wearedevelopers.com/magazine/287-it-salaries-in-germany) - [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs)