Senior Cybersecurity Detection Engineer

Tamkeen Technologies is seeking a highly skilled Senior Cybersecurity Detection Engineer to join our dedicated cybersecurity team. In this pivotal role, you will be responsible for developing and implementing detection strategies to identify and respond to cybersecurity threats and incidents. You will analyze security events and incidents, leveraging advanced threat detection tools to ensure the integrity, confidentiality, and availability of our systems and data. Collaborating closely with incident response and security operations teams, you will play a crucial role in enhancing our security posture through innovative detection technologies, threat hunting, and continuous improvement initiatives. If you are passionate about cybersecurity and have a proven background in detection engineering, we want to hear from you!

Responsibilities

• Administer and maintain security technologies ensuring continuous operation and tuning.
• Integrate and automate workflows across security tools using SOAR playbooks.
• Monitor and analyze alerts, events, and incidents, and escalate or respond as needed.
• Work closely with the SOC team to improve threat detection and response capabilities.
• Perform regular health checks, updates, and patching of all related security platforms.
• Develop and maintain documentation, including configurations, processes, and incident response procedures.
• Coordinate with vendors for troubleshooting and enhancements.
• Assist in security assessments, compliance audits, and risk mitigation initiatives.
• Participate in incident response and post-incident review activities.
• Collaborate with IT and DevOps teams to implement security controls.

Requirements:
• Bachelor’s degree in Computer Science, Information Security, or a related field.
• Minimum 3–5 years of experience in cybersecurity operations or security engineering roles.
• Strong knowledge and experience with at least three of the following tools: Fidelis, Cybereason, FortiSOAR, Extrahop, Exabeam).
• Familiarity with SIEM systems and log analysis (e.g., Splunk).
• Experience in writing or modifying SOAR playbooks and automation scripts (Python, PowerShell, etc.).
• Understanding of MITRE ATT&CK, cyber kill chain, and threat hunting practices.
• Strong problem-solving and communication skills.
• Certification’s vendor-specific Cybersecurity solutions is a plus.