Cyber Detection Engineering Lead (d/f/m)

As Cyber Detection Engineering Lead, you will shape and execute the detection strategy for the Digital Security Team, turning threat intelligence into high-fidelity detections. You will architect the detection ecosystem and drive Detection-as-Code initiatives across the SOC. You’ll mentor engineers, collaborate with incident response, and ensure detections scale with MITRE ATT&CK and Sigma standards. This role combines hands-on engineering with strategic roadmap leadership, at a company active in defense and security. You will work from multiple sites around Munich and nearby locations.

• Attractive remuneration
• company pension schemes
• mobility offers (bike leasing)
• 30 days of annual leave
• flexible working hours
• professional development opportunities

• Define long-term detection strategy aligning with risk profiles
• Architect and maintain high-fidelity detection rules; expand coverage to MITRE ATT&CK and Sigma
• Translate Cyber Threat Intelligence into proactive detection logic
• Drive Detection-as-Code and automated response playbooks
• Mentor junior detection engineers and SOC analysts
• Collaborate with Incident Response and SOC teams for context-rich detections

• Degree in Computer Science, Cybersecurity, Information Technology, or equivalent practical experience
• Proven SOC leadership or mentorship experience
• Strong proficiency in Python and automation frameworks
• Deep expertise in Windows and Linux OS, telemetry and logs
• Practical background in Red Teaming or offensive security mindset
• Advanced knowledge of MITRE ATT&CK and Detection-as-Code concepts
• Strong communication and cross-functional collaboration skills

• Empathetic communication
• Collaborative leadership
• Problem-solving mindset
• Python
• Automation frameworks
• Windows OS internals and telemetry