principal threat detection engineer

DeepSource Technologies

<div>We are seeking an experienced Senior API Security Engineer to join our team on-site. The ideal candidate will have strong expertise in API gateway security, network security solutions, and SIEM integration, with a proven ability to protect enterprise environments against evolving cyber threats.
Key Responsibilities<ul><li>
Design, implement, and manage API security solutions across enterprise environments
</li><li>Configure and maintain API Gateways (e.g., F5, Kong, IBM DataPower)
</li><li>Implement and manage IDS/IPS systems for threat detection and prevention
</li><li>Integrate security solutions with SIEM platforms for monitoring and incident response
</li><li>Develop and enforce API security policies, including rate limiting, authentication, and threat protection
</li><li>Secure APIs by identifying and blocking malicious patterns and automated bot attacks
</li><li>Perform security assessments, vulnerability analysis, and risk mitigation
</li><li>Collaborate with cross-functional teams to ensure secure application delivery</li></ul> 

Requirements 
Minimum 5+ years of experience in API security and network security
Hands-on experience with:
<ul><li>F5 / Kong / IBM DataPower API Gateways
</li><li>IDS/IPS solutions
</li><li>SIEM integration
</li></ul>Strong understanding of:
<ul><li>API security best practices
</li><li>Network security architecture
</li><li>Threat detection and mitigation techniques
</li></ul>Experience in securing APIs against common attack vectors (OWASP, bot attacks, etc.)
Relevant security certifications are mandatory:
<ul><li>CISSP
</li><li>GICSP
</li><li>Or equivalent</li></ul></div>

Senior API Security Engineer - Riyadh, KSA

Worldpay

<div>Job Description
This position is not eligible for visa sponsorship, now or in the future. Candidates must be a US Citizen or valid Green Card Holder
This position is hybrid 3 days per week in either our Cincinnati, OH or Atlanta, GA office. This position is not eligible for remote work.
Are you ready to write your next chapter?
Make your mark at one of the biggest names in payments. We&rsquo;re looking for a Detection Engineer to join our ever-evolving Threat Detection and Automation team and help us unleash the potential of every business.
What you&rsquo;ll own as the Detection Engineer<ul><li>
Develop custom detection logic across SIEM, EDR, and other security tooling within a cutting-edge technology stack.</li><li>
Leverage threat modeling, detection engineering frameworks, and other creative methods to produce high-fidelity, investigation-worthy alerting.</li><li>
Work closely with cross-functional teams to create tailored, purpose-built security content.</li><li>
Lead technical knowledge sharing sessions to empower other teammates and stay on the forefront of content development &amp; beyond.</li><li>
Possess a &ldquo;detection-as-code&rdquo; mindset to drive security content that is confidently deployed, continuously tested, and expertly tuned.</li><li>
Become immersed in our technology stack and logging to deliver solutions that push the boundaries of our security capabilities. Use this familiarity to present our security teams with the most relevant data to make quick and accurate decisions.</li><li>
Stay current with the latest detection engineering techniques, threat tactics, and industry knowledgebase.</li><li>
Shape the future of our data science and advanced analytic efforts.</li></ul>
What you&rsquo;ll bring<ul><li>
Bachelor&rsquo;s degree in computer science/information systems or the equivalent combination of education, training, or work experience. GSEC, GCIH, CISSP or other security or network certifications desired.</li><li>
Typically requires three or more years of experience with:<ul><li>
Experience with cloud-native data platforms, event streaming and analytic engines. Knowledge of network design and data flow/pipelines.</li><li>
Strong understanding of security data lakes, SIEM, EDR, and interacting with SOAR.</li><li>
High proficiency with SIEM query languages and scripting languages (Python, R, Powershell, SQL/KQL/LQL). Adaptability to new languages and technologies.</li><li>
Clean and thoughtful documentation to enable knowledge sharing and reference materials.</li><li>
Agile project development methodologies and incident case management experience.</li><li>
Familiarity with &ldquo;detection-as-code&rdquo; and implementing CI/CD in detection engineering.</li><li>
Ability to identify untapped value, while also possessing a &ldquo;consumer-first&rdquo; mindset to build outstanding security content.</li><li>
In-depth knowledge of security technologies (encryption, data protection, design, privilege access, etc.).</li></ul></li></ul>
About the team
To learn more about our winning teams, check out our world-class teams that own it every day.
What makes a Worldpayer
What makes a Worldpayer? It&rsquo;s simple: Think, Act, Win. We stay curious, always asking the right questions and finding creative solutions to simplify the complex. We&rsquo;re dynamic, every Worldpayer is empowered to make the right decisions for their customers. And we&rsquo;re determined, always staying open and winning and failing as one.
Does this sound like you? Then you sound like a Worldpayer. Apply now to write the next chapter in your career.
#LI-AD1 

EEOC Statement
Worldpay is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, marital status, genetic information, national origin, disability, veteran status, and other protected characteristics. The EEO is the Law poster is available here.
If you are made a conditional offer of employment and will be working in the United States, you will be required to undergo a drug test. In developing this job description care was taken to include all competencies and requirements needed to successfully perform the position. Reasonable accommodations will be provided for individuals with qualified disabilities both during the hiring process, as well as to allow the individual to perform the essential functions of the job, if hired.</div>

Detection Engineer

Saronic Technologies

<div><div><h2 class="jobSectionHeader">Location</h2>
Austin, TX
</div><div><h2 class="jobSectionHeader">Employment Type</h2>
Full time
</div><div><h2 class="jobSectionHeader">Location Type</h2>
On-site
</div><div><h2 class="jobSectionHeader">Department</h2>
Software</div></div>
 <div><div>Saronic Technologies is a leader in revolutionizing autonomy at sea, dedicated to developing state-of-the-art solutions that enhance maritime operations through autonomous and intelligent platforms.
Security at Saronic is a force multiplier. We're seeking a Security Engineer at the senior-level or above on our Security Operations team with strong detection engineering experience. You'll design and develop high-fidelity detection content, build and operate the data pipelines that power our security operations, develop automation playbooks that accelerate response, and work across a uniquely diverse telemetry landscape spanning cloud infrastructure, embedded vessel platforms, corporate systems, and operational technology. 
<div></div>This role is heavily weighted toward detection engineering. You should think in terms of adversary behavior and telemetry coverage, not just alert triage. You'll own detections end-to-end: from identifying gaps in coverage, through designing and testing detection logic, to tuning and validating in production.
<h1 class="jobSectionHeader">Key Responsibilities:</h1>
<ul><li>Design, build, test, and tune high-fidelity detection rules and analytic queries across endpoint, cloud, network, identity, and DLP telemetry sources
</li><li>Develop and maintain detection content using detection-as-code practices including version-controlled logic, automated testing, and CI/CD deployment
</li><li>Map detection coverage to MITRE ATT&amp;CK, identify gaps, and prioritize new detection development based on threat intelligence and business risk
</li><li>Engineer correlation rules, behavioral analytics, and anomaly-based detections that minimize false positives while surfacing real adversary tradecraft
</li><li>Own the detection lifecycle from initial development through production tuning, performance monitoring, and retirement
</li><li>Build and operate pipelines to ingest, normalize, enrich, and manage security telemetry at scale across diverse data sources, using Terraform and infrastructure-as-code practices to deploy and maintain logging and detection infrastructure
</li><li>Design and maintain log collection, parsing, and enrichment configurations that ensure the right telemetry is available at the right fidelity for detection and investigation
</li><li>Evaluate and onboard new telemetry sources as Saronic's infrastructure and threat landscape evolve
</li><li>Monitor pipeline health, data quality, and ingestion reliability to ensure detections operate on complete and accurate data
</li><li>Develop and manage automated response playbooks in SOAR platforms to accelerate containment and reduce analyst toil
</li><li>Build automation that enriches alerts with contextual data, reducing investigation time and improving analyst decision-making
</li><li>Support incident response efforts and translate lessons learned into improved detections and playbooks
</li><li>Partner with SOC analysts, Cloud Security, Product Security, and IT teams to close visibility and detection gaps across environments
</li><li>Collaborate with threat intelligence to ensure detection engineering is informed by current adversary TTPs relevant to defense, maritime, and autonomous systems
</li></ul><h1 class="jobSectionHeader">Required Qualifications:</h1>
<ul><li>3+ years of hands-on experience in detection engineering, security operations, security automation, or a closely related security engineering role
</li><li>Demonstrated experience designing, testing, and tuning detection rules and analytic queries across production security telemetry (endpoint, cloud, network, identity, or DLP)
</li><li>Hands-on experience with SIEM platforms and proficiency with query languages such as SPL, KQL, or equivalent
</li><li>Experience building and operating security data pipelines, including log ingestion, normalization, enrichment, and data quality management
</li><li>Understanding of data engineering concepts including ETL pipelines, data modeling, schema design, and indexing as applied to security telemetry
</li><li>Hands-on coding experience in Python, PowerShell, Go, or Rust for security automation, detection tooling, or pipeline development, and familiarity with Terraform for managing detection and logging infrastructure as code
</li><li>Understanding of MITRE ATT&amp;CK framework and its application to detection coverage and gap analysis
</li><li>Ability to obtain and maintain a security clearance
</li></ul><h1 class="jobSectionHeader">Preferred Qualifications:</h1>
<ul><li>Experience in defense, aerospace, robotics, autonomy, or other high-assurance environments
</li><li>Experience with EDR platforms including custom detection rule creation and telemetry analysis
</li><li>Experience with cloud-native detection in AWS and Microsoft 365/Azure
</li><li>Experience using Terraform to deploy and manage security monitoring infrastructure, log pipeline components, or cloud-native security service configurations
</li><li>Hands-on experience with incident response, threat hunting, or adversary emulation
</li><li>Exposure to embedded Linux, operational technology, or ICS telemetry and detection
</li><li>Familiarity with NIST SP 800-171, NIST SP 800-53, or CMMC and their logging and monitoring requirements
</li><li>Relevant certifications such as GCIH, GCIA, GCDA, GSOM, OSDA, or OSCP
</li></ul><h1 class="jobSectionHeader">Benefits:</h1>
<ul><li>Medical Insurance: Comprehensive health insurance plans covering a range of services
</li><li>Saronic pays 100% of the premium for employees and 80% for dependents
</li><li>Dental and Vision Insurance: Coverage for routine dental check-ups, orthodontics, and vision care
</li><li>Saronic pays 100% of the premium under the basic plan for employees and 80% for dependents
</li><li>Time Off: Generous PTO and Holidays
</li><li>Parental Leave: Paid maternity and paternity leave to support new parents
</li><li>Competitive Salary: Industry-standard salaries with opportunities for performance-based bonuses
</li><li>Retirement Plan: 401(k) plan
</li><li>Stock Options: Equity options to give employees a stake in the company&rsquo;s success
</li><li>Life and Disability Insurance: Basic life insurance and short- and long-term disability coverage
</li><li>Pet Insurance: Discounted pet insurance options including 24/7 Telehealth helpline
</li><li>Additional Perks: Free lunch benefit and unlimited free drinks and snacks in the office 
</li></ul><div></div>This role requires access to export-controlled information or items that require &ldquo;U.S. Person&rdquo; status. As defined by U.S. law, individuals who are any one of the following are considered to be a &ldquo;U.S. Person&rdquo;: (1) U.S. citizens, (2) legal permanent residents (a.k.a. green card holders), and (3) certain protected classes of asylees and refugees, as defined in 8 U.S.C. 1324b(a)(3).
Saronic does not discriminate on the basis of race, sex, color, religion, age, national origin, marital status, disability, veteran status, genetic information, sexual orientation, gender identity or any other reason prohibited by law in provision of employment opportunities and benefits.</div></div>

Security Engineer, Detection Engineering

Blackrock Neurotech

<div>Job Title: Principal Systems Engineer
Company: Adraxe
Job Type: Full-Time
Location: Plymouth, MN (Hybrid)<h1 class="jobSectionHeader">
Adraxe - Company Overview</h1>
Adraxe Corporation is an innovative medical device startup focused on the design, development, and launch of breakthrough, minimally invasive neuromodulation solutions to address unmet patient needs. The results from the first clinical epilepsy patients are encouraging and we are at the important stage of hiring key personnel, to accelerate our progress and starting our full product and clinical development. Our goal is to revolutionize neurological care with life-compatible, closed-loop neuromodulation therapies, starting with epilepsy. 
About the role 
We are seeking a highly experienced and technically driven Principal Systems Engineer to lead systems engineering for a closed-loop epilepsy therapy system, with primary emphasis on neural interface performance, end-to-end system integration, full-stack data flow, and optimization of seizure detection algorithms within a regulated (PMA) development framework. The system includes an active implantable medical device (AIMD), custom external instruments, clinician and patient applications, and a secure cloud platform. 
The ideal candidate is a systems engineer who is strongest at the intersection of neural signals + real world data + integrated system behavior who can reason from electrode physics to algorithm metrics to telemetry and cloud pipelines, and knows how to turn that into testable requirements and credible verification evidence. The ideal candidate;<ul><li>
Has owned or heavily influenced signal chain and algorithm performance in embedded, constrained systems and is comfortable building evaluation frameworks and test plans that reflect reality, not ideal lab conditions.</li><li>
Understands that &ldquo;algorithm performance&rdquo; isn&rsquo;t just a model score&mdash;it&rsquo;s latency, robustness, power, reliability, data quality, and user workflow.</li><li>
Can lead cross-functional teams through integration complexity with discipline appropriate for PMA.</li></ul> 
This position will report directly to the VP of Engineering, will have significant input into Adraxe strategy and planning, and will collaborate closely with all technical disciplines at Adraxe. 
What you'll do 
Systems Architecture and Technical Leadership<ul><li>
Define and maintain the system architecture spanning implant, external instruments, clinician/patient applications, and cloud services.</li><li>
Lead trade studies (power, latency, telemetry, sensing/stimulation performance, reliability, safety, cybersecurity) and drive decisions with cross-functional alignment.</li><li>
Establish and manage interfaces (electrical, RF/telemetry, APIs, data models, workflow integrations) and ensure compatibility across subsystems.</li><li>
Guide development of closed-loop control concepts (sensing detection/classification therapy delivery adaptation), including system-level performance metrics and constraints.</li></ul>
Neural Interface &amp; Signal Chain Ownership<ul><li>
Develop deep system-level understanding of the neural interface (electrode-tissue interface, sensing modalities, impedance behavior, artifact sources, saturation, noise, drift) and how it impacts detection and therapy performance.</li><li>
Define and manage requirements for the signal chain (front-end analog, ADC, filtering, sampling, dynamic range, stimulation artifact handling, telemetry constraints) and ensure traceability to detection performance and safety.</li><li>
Partner with hardware, firmware, and clinical teams to characterize signal quality across populations and conditions (movement, sleep, medication changes, electrode maturation).</li></ul>
Seizure Detection Algorithm Performance &amp; Optimization<ul><li>
Translate clinical needs into measurable algorithm performance metrics (e.g., sensitivity, false alarm rate, latency to detection, time-in-warning, robustness to artifacts) and establish acceptance criteria.</li><li>
Drive system-level optimization across algorithm + firmware + data pipeline to meet performance targets under real device constraints (compute, memory, power, latency).</li><li>
Lead closed-loop performance analyses that connect sensing detection therapy behavior, including edge cases and failure modes.</li><li>
Coordinate creation of curated datasets, labeling strategies, ground-truth definitions, and evaluation protocols (including subgroup and scenario performance).</li></ul>
End-to-End Data Flow &amp; Observability (Implant External Apps Cloud)<ul><li>
Define and validate the complete system data flow: on-device data generation, event markers, compression/packetization, telemetry, external device handling, app storage/display, cloud ingestion, processing, and analytics.</li><li>
Ensure data integrity across the lifecycle: time synchronization, identity mapping, provenance, audit trails, retention, and traceability required for regulated evidence.</li><li>
Specify and validate observability features: logging, metrics, error reporting, trace IDs, and tools to support troubleshooting, clinical workflows, and post-market surveillance.</li></ul>
System Integration &amp; Test Leadership (PMA-Grade Evidence)<ul><li>
Own the integrated system test strategy with emphasis on realistic, high-value integration coverage (HIL/SIL, simulated physiology, induced artifacts, telemetry stress, app/cloud failure modes).</li><li>
Define system-level test methods and rigs to validate sensing and detection performance under representative conditions (including stimulation artifact conditions if applicable).</li><li>
Drive integration readiness criteria, defect triage workflows, and release gating for end-to-end functionality.</li><li>
Ensure traceability from user needs and hazards to verification evidence across the integrated system.</li></ul>
Safety, Risk, and Performance Boundaries for Closed-Loop Operation<ul><li>
Lead identification of hazards and risk controls related to detection performance, therapy timing, and data integrity (e.g., missed detection, false positives, telemetry dropouts, timebase drift, data corruption).</li><li>
Define safe bounds and fallback behaviors (therapy limits, safe modes, detection confidence gating, watchdogs) and verify they work across system states and failures.</li></ul>
Verification, Validation, and Test Strategy<ul><li>
Lead design verification testing (DVT) and verification planning to ensure compliance with medical device standards and safety requirements.</li><li>
Ensure designs meet relevant standards (e.g., IEC 60601, ISO 14708, ISO 14971, EMI/EMC compliance).</li><li>
Define end-to-end system verification and validation strategy across implant + external + applications + cloud, including integration and system testing.</li><li>
Develop test environments (benchtop rigs, simulators, HIL/SIL as appropriate, clinical workflow simulations)</li><li>
Data-driven verification of sensing/detection/therapy performance (as applicable)</li><li>
Drive design reviews, ensure readiness for formal V&amp;V, and support PMA documentation and inspection readiness.</li></ul>
Cross-Functional Leadership and Mentorship<ul><li>
Lead technical alignment across firmware, hardware, algorithms, app engineering, cloud, clinical, quality, regulatory, and manufacturing.</li><li>
Mentor systems engineers and establish best practices for systems engineering rigor, documentation quality, and integration readiness.</li><li>
Communicate clearly with stakeholders, translating complex technical tradeoffs into decision-ready options and documented outcomes.</li></ul>
Qualifications 
Minimum Qualifications are:<ul><li>
B.S. in Systems, Computer Science, Electrical Engineering, Biomedical Engineering, Mechanical Engineering, or related field.</li><li>
10+ years (or equivalent) experience in systems engineering for complex electromechanical and software-intensive products; medical device experience strongly preferred.</li><li>
Demonstrated experience developing implantable and/or active therapeutic devices (e.g., neuromodulation, cardiac rhythm management, or similar).</li><li>
Experience with implantable sensing modalities and neural signals (e.g., iEEG/ECoG/SEEG or related), including artifact sources and long-term recording challenges.</li></ul>
Strong command of:<ul><li>
Requirements development, decomposition, and traceability</li><li>
System architecture and interface definition (ICDs)</li><li>
System integration and V&amp;V planning and execution for distributed systems</li><li>
Risk management and safety engineering in regulated contexts</li><li>
Proven ability to lead through influence across multi-disciplinary teams and drive cross-functional execution.</li><li>
Strong written and verbal communication skills, including the ability to produce clear, inspection-ready technical documentation.</li></ul> 
Preferred Qualifications<ul><li>
M.S. or Ph.D. in Electrical Engineering, Biomedical Engineering, or related field.</li><li>
Experience supporting PMA development (design controls, DHF evidence, traceability, and system V&amp;V evidence packages).</li><li>
Experience with seizure detection/classification and/or robust biosignal detection methods in real-world settings.</li><li>
Experience designing and validating end-to-end data pipelines for regulated products (time sync, provenance, auditability, retention, access control).</li><li>
Strong background in system integration testing for distributed systems (embedded + apps + cloud), including SIL/HIL, simulation, and test automation.</li><li>
Working knowledge of cybersecurity engineering for connected medical systems (threat modeling, encryption, key management, vulnerability management).</li></ul> 
Physical and Other Requirements<ul><li>
This position is located in Plymouth MN.</li><li>
This position is a hybrid position with an expectation of roughly 75% in office and 25% remote work.</li><li>
This position requires approximately 15% Travel including international travel.</li></ul></div>

Adraxe: Principal Systems Engineer

PartnerOne

<div>
 
 About Us
 
 
 
 NetWitness has been at the forefront of cybersecurity for over two decades, delivering industry-leading solutions in Network Forensics, Network Detection &amp; Response (NDR), SIEM, UEBA, and SOAR, alongside best-in-class Incident Response services. Our platform empowers organizations to detect, investigate, and respond to the most sophisticated threats targeting their networks and critical assets.
 
 
 
 Role Overview
 
 
 
 The role is for a NetWitness Presales Engineer based in Egypt covering Africa.
 
 
 As a ore-sales Systems Engineer, you will play a pivotal role in driving the adoption of our solutions and services. You will be the primary technical voice in the sales cycle, acting as a trusted advisor to customers while working hand-in-hand with the regional sales team. You will bridge the gap between complex cybersecurity challenges and the NetWitness platform, translating technical capabilities into clear business value.
 
 
 This role demands both deep technical expertise and strong interpersonal skills. You will own Proof-of-Concept engagements, lead executive and technical presentations, and actively contribute to the broader NetWitness community through industry events, workshops, and partner enablement.
 
 
 
 Key Responsibilities
 
 
 
 
 Technical Sales Engagement
 
 
 
 <ul>
 <li>
 Serve as the primary technical point of contact throughout the sales cycle
 </li>
 <li>
 Partner with the sales team to develop and execute winning sales strategies
 </li>
 <li>
 Lead in-depth technical presentations and product demonstrations, effectively communicating both technical depth and business value
 </li>
 <li>
 Respond o RFPs and RFIs, crafting compelling technical proposals and solution architectures
 
 
 </li>
 </ul>
 
 Customer Success &amp; Advisory
 
 
 
 <ul>
 <li>
 Build and maintain trusted advisor relationships with key technical and executive stakeholders
 </li>
 <li>
 Conduct discovery sessions to understand customer security challenges, infrastructure, and strategic goals, then design tailored NetWitness solutions
 </li>
 <li>
 Design, deploy, and manage Proof-of-Concept (POC) evaluations, ensuring measurable, documented outcomes
 </li>
 <li>
 Deliver health-checks, workshops, and technical roadmap sessions for existing customers to retain and expand their NetWitness footprint
 
 
 </li>
 </ul>
 
 Ecosystem &amp; Enablement
 
 
 
 <ul>
 <li>
 Own and develop the technical partner relationships within the assigned territory, including enablement and joint POC support
 </li>
 <li>
 Provide technical training and mentoring to sales team members and channel partners
 </li>
 <li>
 Represent NetWitness at industry events, trade shows, conferences, and seminars &mdash; delivering presentations and generating pipeline
 
 
 </li>
 </ul>
 
 Product &amp; Market Intelligence
 
 
 
 <ul>
 <li>
 Maintain deep, current knowledge of the NetWitness platform, competitive landscape, and adjacent security technologies
 </li>
 <li>
 Stay ahead of emerging threats, attack techniques, and industry trends to deliver relevant, credible technical discussions
 </li>
 <li>
 Serve as the voice of the customer to product management and engineering, relaying field insights, feature gaps, and competitive intelligence to influence the product roadmap
 
 
 </li>
 </ul>
 
 Requirements
 
 
 
 <ul>
 <li>
 3+ years of experience in a presales, sales engineering, security consulting, or similar customer-facing technical role within the cybersecurity industry
 </li>
 <li>
 Demonstrable experience working with the Government, Enterprise, and Financial sectors in Egypt and Africa
 </li>
 <li>
 Deep understanding of networking protocols, network security architectures, and packet-level analysis
 </li>
 <li>
 Strong knowledge of threat detection methodologies, MITRE ATT&amp;CK framework, incident response processes, and common attack techniques (living-off-the-land, lateral movement, C2, etc.)
 </li>
 <li>
 Exposure to threat hunting, detection engineering, or SOC operations
 </li>
 <li>
 Industry certifications: CISSP, CISM, CEH, GCIH, GCIA, GDAT, or equivalent SANS/GIAC credentials
 </li>
 <li>
 Hands-on experience with one or more Threat Detection &amp; Response platforms: SIEM, NDR, EDR
 </li>
 <li>
 Proven ability to design and execute effective POCs, including success criteria definition and executive-level readout
 </li>
 <li>
 Excellent communication and presentation skills, able to adapt messaging for both CISO-level executives and SOC analysts
 </li>
 <li>
 Familiarity with Linux CLI, basic scripting (Python/Bash), and log/packet analysis workflows
 </li>
 <li>
 Willingness to travel up to 30% across the territory
 </li>
 <li>
 Full professional fluency in English and Arabic is a must, both written and spoken. Fluency in French is a plus
 </li>
 </ul>
</div>

Systems Engineer

Partner One Capital

<div>About Us
NetWitness has been at the forefront of cybersecurity for over two decades, delivering industry-leading solutions in Network Forensics, Network Detection &amp; Response (NDR), SIEM, UEBA, and SOAR, alongside best-in-class Incident Response services. Our platform empowers organizations to detect, investigate, and respond to the most sophisticated threats targeting their networks and critical assets. 

Role Overview
The role is for a NetWitness Presales Engineer based in Egypt covering Africa.
As a ore-sales Systems Engineer, you will play a pivotal role in driving the adoption of our solutions and services. You will be the primary technical voice in the sales cycle, acting as a trusted advisor to customers while working hand-in-hand with the regional sales team. You will bridge the gap between complex cybersecurity challenges and the NetWitness platform, translating technical capabilities into clear business value.
This role demands both deep technical expertise and strong interpersonal skills. You will own Proof-of-Concept engagements, lead executive and technical presentations, and actively contribute to the broader NetWitness community through industry events, workshops, and partner enablement. 

Key Responsibilities
Technical Sales Engagement<ul><li>Serve as the primary technical point of contact throughout the sales cycle.</li><li>Partner with the sales team to develop and execute winning sales strategies.</li><li>Lead in-depth technical presentations and product demonstrations, effectively communicating both technical depth and business value.</li><li>Respond o RFPs and RFIs, crafting compelling technical proposals and solution architectures.</li></ul> 
Customer Success &amp; Advisory<ul><li>Build and maintain trusted advisor relationships with key technical and executive stakeholders.</li><li>Conduct discovery sessions to understand customer security challenges, infrastructure, and strategic goals, then design tailored NetWitness solutions.</li><li>Design, deploy, and manage Proof-of-Concept (POC) evaluations, ensuring measurable, documented outcomes.</li><li>Deliver health-checks, workshops, and technical roadmap sessions for existing customers to retain and expand their NetWitness footprint.</li></ul> 
Ecosystem &amp; Enablement<ul><li>Own and develop the technical partner relationships within the assigned territory, including enablement and joint POC support.</li><li>Provide technical training and mentoring to sales team members and channel partners.</li><li>Represent NetWitness at industry events, trade shows, conferences, and seminars &mdash; delivering presentations and generating pipeline.</li></ul> 
Product &amp; Market Intelligence<ul><li>Maintain deep, current knowledge of the NetWitness platform, competitive landscape, and adjacent security technologies.</li><li>Stay ahead of emerging threats, attack techniques, and industry trends to deliver relevant, credible technical discussions.</li><li>Serve as the voice of the customer to product management and engineering, relaying field insights, feature gaps, and competitive intelligence to influence the product roadmap.</li></ul> 
Requirements<ul><li> 
3+ years of experience in a presales, sales engineering, security consulting, or similar customer-facing technical role within the cybersecurity industry.</li><li>Demonstrable experience working with the Government, Enterprise, and Financial sectors in Egypt and Africa.</li><li>Deep understanding of networking protocols, network security architectures, and packet-level analysis.</li><li>Strong knowledge of threat detection methodologies, MITRE ATT&amp;CK framework, incident response processes, and common attack techniques (living-off-the-land, lateral movement, C2, etc.).</li><li>Exposure to threat hunting, detection engineering, or SOC operations.</li><li>Industry certifications: CISSP, CISM, CEH, GCIH, GCIA, GDAT, or equivalent SANS/GIAC credentials.</li><li>Hands-on experience with one or more Threat Detection &amp; Response platforms: SIEM, NDR, EDR.</li><li>Proven ability to design and execute effective POCs, including success criteria definition and executive-level readout.</li><li>Excellent communication and presentation skills, able to adapt messaging for both CISO-level executives and SOC analysts.</li><li>Familiarity with Linux CLI, basic scripting (Python/Bash), and log/packet analysis workflows.</li><li>Willingness to travel up to 30% across the territory.</li><li>Full professional fluency in English and Arabic is a must, both written and spoken. Fluency in French is a plus.</li></ul></div>

Commercial Bank of Dubai

<div>Dubai, Dubai, AE Management Permanent ID: 100251</div>
 <div><div><div><div><h3 class="jobSectionHeader">DESCRIPTION</h3>
<div>Job Purpose:
The role is responsible for monitoring, analysing, and responding to security events and incidents to ensure timely detection and containment of threats. It ensures the effective implementation and continuous improvement of security controls aligned with regulatory requirements, industry standards, and organizational policies. The Senior IT Security Analyst supports vulnerability management, threat intelligence, and risk assessments to strengthen the overall security posture. The role collaborates closely with IT, business, and third‑party stakeholders to embed security best practices across systems, applications, and processes. It provides expert guidance during security investigations, audits, and regulatory inspections, ensuring accurate reporting and compliance. The position contributes to security architecture reviews, change management, and project initiatives to ensure security-by-design principles are applied.
Principal Accountabilities:<ul><li>
Monitor, analyze, and investigate security events and alerts using SIEM, EDR, NDR, and other security platforms.</li><li>
Lead incident response activities, including containment, eradication, root cause analysis, and post‑incident reporting.</li><li>
Perform vulnerability assessments and coordinate remediation activities with infrastructure, application, and operations teams.</li><li>
Conduct regular security risk assessments and support risk treatment plans aligned with business objectives.</li><li>
Ensure implementation and effectiveness of security controls in line with ISO 27001, NIST, PCI DSS, and regulatory requirements.</li><li>
Support internal, external, and regulatory audits by providing evidence, explanations, and corrective action tracking.</li><li>
Analyze threat intelligence feeds and emerging cyber threats to proactively enhance detection and prevention capabilities.</li><li>
Review security architecture, system designs, and change requests to ensure security‑by‑design principles are applied.</li><li>
Manage and tune security tools and technologies to improve detection accuracy and reduce false positives.</li><li>
Coordinate with SOC, IT operations, and third‑party service providers on security monitoring and incident handling (as Level 3).</li><li>
Develop and maintain security procedures, playbooks, and standard operating procedures (SOPs).</li><li>
Support data protection and information classification initiatives, including security monitoring and incident handling.</li><li>
Perform periodic access reviews, privileged access monitoring, and support identity and access management controls.</li><li>
Track, report, and trend security metrics, incidents, and risk indicators for management and governance forums.</li><li>
Support business continuity, disaster recovery, and cyber resilience planning from a security perspective.</li><li>
Provide security guidance and awareness to IT and business teams to promote secure practices.</li></ul></div></div></div></div></div>
 <div><div><div><div><h3 class="jobSectionHeader">REQUIREMENTS</h3>
<div>Education and Experience<ul><li>
Bachelor&rsquo;s degree in computer science, Information Technology, Information Systems, or related discipline.</li><li>
Equivalent professional experience may be considered in lieu of formal education where applicable.</li><li>
CISSP, CISM, CISA, or equivalent internationally recognized cyber security certification.</li><li>
Vendor‑specific security certifications (e.g., EDR, SIEM, Firewall, Cloud Security) are highly desirable.</li><li>
Minimum 5&ndash;8 years of hands‑on experience in IT Security Operations, Cyber Security, or Information Security roles.</li></ul></div></div></div></div></div>

Senior IT Security Analyst ( UAE National )

Search 5544+ Principal threat detection engineer jobs near you this May. New roles added regularly across leading industries. Apply today.

5544 principal threat detection engineer jobs Near Me

Senior API Security Engineer - Riyadh, KSA

Detection Engineer

Security Engineer, Detection Engineering

Adraxe: Principal Systems Engineer

Systems Engineer

Systems Engineer

Senior IT Security Analyst ( UAE National )