threat detection engineer

Worldpay

<div>Job Description
This position is not eligible for visa sponsorship, now or in the future. Candidates must be a US Citizen or valid Green Card Holder
This position is hybrid 3 days per week in either our Cincinnati, OH or Atlanta, GA office. This position is not eligible for remote work.
Are you ready to write your next chapter?
Make your mark at one of the biggest names in payments. We&rsquo;re looking for a Detection Engineer to join our ever-evolving Threat Detection and Automation team and help us unleash the potential of every business.
What you&rsquo;ll own as the Detection Engineer<ul><li>
Develop custom detection logic across SIEM, EDR, and other security tooling within a cutting-edge technology stack.</li><li>
Leverage threat modeling, detection engineering frameworks, and other creative methods to produce high-fidelity, investigation-worthy alerting.</li><li>
Work closely with cross-functional teams to create tailored, purpose-built security content.</li><li>
Lead technical knowledge sharing sessions to empower other teammates and stay on the forefront of content development &amp; beyond.</li><li>
Possess a &ldquo;detection-as-code&rdquo; mindset to drive security content that is confidently deployed, continuously tested, and expertly tuned.</li><li>
Become immersed in our technology stack and logging to deliver solutions that push the boundaries of our security capabilities. Use this familiarity to present our security teams with the most relevant data to make quick and accurate decisions.</li><li>
Stay current with the latest detection engineering techniques, threat tactics, and industry knowledgebase.</li><li>
Shape the future of our data science and advanced analytic efforts.</li></ul>
What you&rsquo;ll bring<ul><li>
Bachelor&rsquo;s degree in computer science/information systems or the equivalent combination of education, training, or work experience. GSEC, GCIH, CISSP or other security or network certifications desired.</li><li>
Typically requires three or more years of experience with:<ul><li>
Experience with cloud-native data platforms, event streaming and analytic engines. Knowledge of network design and data flow/pipelines.</li><li>
Strong understanding of security data lakes, SIEM, EDR, and interacting with SOAR.</li><li>
High proficiency with SIEM query languages and scripting languages (Python, R, Powershell, SQL/KQL/LQL). Adaptability to new languages and technologies.</li><li>
Clean and thoughtful documentation to enable knowledge sharing and reference materials.</li><li>
Agile project development methodologies and incident case management experience.</li><li>
Familiarity with &ldquo;detection-as-code&rdquo; and implementing CI/CD in detection engineering.</li><li>
Ability to identify untapped value, while also possessing a &ldquo;consumer-first&rdquo; mindset to build outstanding security content.</li><li>
In-depth knowledge of security technologies (encryption, data protection, design, privilege access, etc.).</li></ul></li></ul>
About the team
To learn more about our winning teams, check out our world-class teams that own it every day.
What makes a Worldpayer
What makes a Worldpayer? It&rsquo;s simple: Think, Act, Win. We stay curious, always asking the right questions and finding creative solutions to simplify the complex. We&rsquo;re dynamic, every Worldpayer is empowered to make the right decisions for their customers. And we&rsquo;re determined, always staying open and winning and failing as one.
Does this sound like you? Then you sound like a Worldpayer. Apply now to write the next chapter in your career.
#LI-AD1 

EEOC Statement
Worldpay is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, marital status, genetic information, national origin, disability, veteran status, and other protected characteristics. The EEO is the Law poster is available here.
If you are made a conditional offer of employment and will be working in the United States, you will be required to undergo a drug test. In developing this job description care was taken to include all competencies and requirements needed to successfully perform the position. Reasonable accommodations will be provided for individuals with qualified disabilities both during the hiring process, as well as to allow the individual to perform the essential functions of the job, if hired.</div>

Detection Engineer

Amazon.com

<div><h2 class="jobSectionHeader">DESCRIPTION</h2><div>
Amazon Defensive Security&rsquo;s Threat Detection team provides threat detection coverage for all of Amazon. In other words, we&rsquo;re the people who keep Amazon secure from threat actors. We provide coverage to all of Amazon &amp; it subsidiaries across endpoint, cloud, network and application vectors ensuring Amazon infrastructure and customers data is secured. We work on the most challenging problems that are influenced with thousands of variables&mdash; and we&rsquo;re on the lookout for talented individuals eager to make an impact. 
 
You&rsquo;ll be part of a diverse team spanning software and security engineering disciplines. You&rsquo;ll collaborate with leaders across Amazon Security to help us build complex threat detection product, delivering comprehensive threat detection coverage at optimal business costs. And you&rsquo;ll experience an inclusive culture that welcomes bold ideas and empowers you to own them to completion. Our product is at the forefront of innovating the sophisticated, low-latency, high-performance threat detection solutions. Our industry-leading solutions are critical to safeguarding Amazon's success and protecting customer data. 
 
The successful candidate is expected to contribute to all parts of the software development and deployment lifecycle, including design, development, documentation, testing and operations. They must possess strong verbal and written communication skills, be self-driven and deliver high quality results in a fast paced environment. They will also need to be proactive and jump on to the problems quickly to come out with innovative solutions and operate with minimal guidance. 
 
Key job responsibilities 
<ul><li>Manage critical components of our threat detection platform that processes millions of messages in a day</li><li>Evaluate different design choices, prototype new technology, and implement technical solutions that address business requirements</li><li>Contribute in defining product roadmap, understand business impact of system choices, and make technical trade-offs using sound judgement</li><li>Work closely with product leadership, security partners to understand the requirements, design and deliver innovative solutions to raise bar on customer trust.</li><li>Drive engineering best practices around operational excellence, security, test automation coverage and set standards in the team</li><li>Deal with ambiguity, make data-driven decisions and juggle cross-organization complexity</li><li>Drive consensus when confronted with discordant views by identifying the best path forward and influence other to follow it</li></ul> 
About the team 
Why Amazon Defensive Security? 
At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon&rsquo;s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. 
 
Diverse Experiences 
Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn&rsquo;t followed a traditional path, or includes alternative experiences, don&rsquo;t let it stop you from applying. 
 
Inclusive Team Culture 
In Amazon Security, it&rsquo;s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. 
 
Training &amp; Career Growth 
We&rsquo;re continuously raising our performance bar as we strive to become Earth&rsquo;s Best Employer. That&rsquo;s why you&rsquo;ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. 
 
Work/Life Balance 
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there&rsquo;s nothing we can&rsquo;t achieve.</div><h2 class="jobSectionHeader">
BASIC QUALIFICATIONS</h2><ul><li>3+ years of non-internship professional software development experience</li><li>2+ years of non-internship design or architecture (design patterns, reliability and scaling) of new and existing systems experience</li><li>Experience programming with at least one software programming language</li></ul><h2 class="jobSectionHeader">
PREFERRED QUALIFICATIONS</h2><ul><li>3+ years of full software development life cycle, including coding standards, code reviews, source control management, build processes, testing, and operations experience</li><li>Bachelor's degree in computer science or equivalent</li></ul> 
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. 
 
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you&rsquo;re applying in isn&rsquo;t listed, please contact your Recruiting Partner. 
The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life &amp; AD&amp;D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits. 
USA, TX, Austin - 143,700.00 - 194,400.00 USD annually 
USA, WA, Seattle - 143,700.00 - 194,400.00 USD annually</div>

Software Development Engineer II, Security Products

Follett Content Solutions LLC

<div>Description:

Follett Content Solutions has been a trusted partner for educators since 1873! We support our educators that reach more than 45 million students worldwide. Follett Content Solutions helps build a diverse collection of print and digital resources to support every student. We are currently hiring for an Cybersecurity Program Lead in our office. This is a full-time exempt position located in McHenry, IL. This position is a hybrid position requiring you to be in the office Monday, Tuesday, &amp; Thursdays with Wednesday &amp; Friday work from home days. The pay for this position is $100,000 - $125,000 annually. We offer an array of benefits, to see those benefits click here.
Any pay range disclosed is based upon a combination of neutral factors such as required qualifications, experience, education, skill, training, certifications, seniority, etc. Follett Content Solutions reserves the right to provide any successful candidate with a salary at the most appropriate level set as a result of such candidate&rsquo; qualifications, experience, education, skill, training, certifications, location or seniority.
Position Overview
The Cybersecurity Lead is responsible for safeguarding the confidentiality, integrity, and availability of Follett&rsquo;s systems, data, and cloud environments. This role serves as the primary technical authority for cybersecurity across the organization, leading the design, implementation, and continuous improvement of security controls in a hybrid on-premise and cloud environment.
The Cybersecurity Lead partners closely with Infrastructure, Networking, Application Development, and Legal/Governance stakeholders to ensure security is embedded into daily operations, modernization initiatives, and long-term architectural planning. This role owns incident response and threat detection activities, leads cloud and application security efforts, and provides technical support for governance and compliance programs.
As the organization expands its use of AI tools and modern development workflows, the Cybersecurity Lead plays a critical role in ensuring secure integration, proper logging, responsible use, and adherence to internal security standards. The ideal candidate brings strong hands-on experience with Azure security, modern development practices, endpoint protection, and threat detection engineering.
Key Responsibilities:
Incident Response &amp; Threat Detection<ul><li>
Serves as the primary responder for security incidents across cloud, endpoint, and network environments.</li><li>
Collaborates with the Rapid7 SOC to validate alerts, tune detections, and improve response workflows.</li><li>
Conducts threat hunting and telemetry analysis within SentinelOne and other security platforms.</li><li>
Leads containment and remediation efforts in partnership with Infrastructure, Networking, and Application teams.</li><li>
Develops and refines detection logic, response playbooks, and escalation procedures.</li></ul>
Cloud, Application &amp; AI Security<ul><li>
Designs and implements security controls for Azure workloads, identity, and cloud-native services.</li><li>
Partners with Application Development to integrate secure coding practices, API security, and threat modeling into the SDLC.</li><li>
Establishes standards for secure use of AI tools, including logging, access controls, and data protection requirements.</li><li>
Supports security considerations for business application modernization initiatives</li><li>
Evaluates and recommends cloud and application security tools, patterns, and architectures.</li></ul>
Security Engineering &amp; Endpoint Oversight<ul><li>
Leads configuration, tuning, and continuous improvement of security technologies including SentinelOne, Microsoft Defender, Purview, Action1, and SIEM integrations.</li><li>
Develops and maintains security baselines for servers, endpoints, and cloud resources.</li><li>
Ensures endpoint coverage and agent health across the environment, partnering with the Service Desk for deployment and remediation.</li><li>
Implements automation and scripting to improve security operations and reduce manual effort.</li></ul>
Vulnerability Management<ul><li>
Owns the vulnerability management lifecycle using Rapid7, including scan tuning, prioritization, and reporting.</li><li>
Identifies and escalates critical vulnerabilities requiring immediate remediation.</li><li>
Coordinates with Infrastructure, Networking, and Development teams to track and validate remediation progress.</li><li>
Provides actionable guidance to reduce risk across cloud, endpoint, and network environments.</li></ul>
Requirements:
<ul><li>Bachelor&rsquo;s degree in Computer Science, Cybersecurity, Engineering, or related discipline OR equivalent training/professional experience.</li><li>
5+ years of hands-on experience in cybersecurity engineering, cloud security, application security, or related technical security roles preferred; candidates with fewer years but exceptional aptitude, development experience, or demonstrated security capability will be considered.</li><li>
Strong written and verbal communication skills with the ability to collaborate effectively across Infrastructure, Networking, Development, and Legal/Governance teams.</li><li>
3+ years of experience securing cloud environments, preferably Microsoft Azure (Entra ID, Defender, Purview, workload protection, identity governance).</li><li>
Demonstrated experience with application security concepts, including secure coding practices, API security, threat modeling, and working directly with development teams.</li><li>
Familiarity with AI/ML security considerations, including data protection, access controls, logging, and responsible use of AI tools in enterprise environments.</li><li>
Experience with vulnerability management platforms (Rapid7 preferred), including scan tuning, prioritization, and remediation workflows.</li><li>
Strong understanding of identity and access management, authentication technologies, role-based authorization, and zero-trust principles.</li><li>
Working knowledge of risk assessment methodologies, threat modeling, and security control frameworks (NIST CSF, CIS Controls, SOC 2).</li><li>
Ability to translate business requirements and risks into secure technical solutions and actionable remediation guidance.</li><li>
Technical proficiency with endpoint protection, cloud security tools, scripting/automation, and hybrid infrastructure environments.</li><li>
Experience collaborating with third-party providers, SOC partners, auditors, or managed service providers.</li><li>
Self-driven, highly motivated, and able to manage multiple priorities in a fast-moving environment.</li><li>
Strong analytical, troubleshooting, and problem-solving skills with a team-oriented mindset.</li><li>
Demonstrated ability to operate as a Lead/IC, taking ownership of security engineering, incident response, and cross-functional coordination in a lean IT environment.</li><li>
Experience supporting security considerations during business application modernization initiatives.</li><li>
Position requires you to be on call 24/7</li><li>
AZ 500, AZ 104, CCSK/CCSP, Security+, CySA+, CISSP, or equivalent cloud/security credentials highly preferred.</li></ul>
We are an Equal Opportunity Employer. All qualified applicants will receive consideration for employment, without regard to race, color, religion, national origin, pregnancy, sexual orientation, gender identity, age, physical or mental disability, genetic factors, military/veteran status, or other characteristics protected by law. As an Equal Opportunity Employer, we are committed to providing reasonable accommodations to job applicants with disabilities. If you are interested in applying for employment and need assistance or an accommodation in the application process due to a disability, please contact us by email or phone.<ul><li>
 Email: Send request to fcshr@follettcontent.com</li><li>
 Phone: Request assistance by calling 800.773.7010 x45130</li></ul>
When contacting us, please provide your contact information, the job position or title, and state the nature of your accessibility issue.</div>

Cybersecurity Program Lead

DeepSource Technologies

<div>We are seeking an experienced Senior API Security Engineer to join our team on-site. The ideal candidate will have strong expertise in API gateway security, network security solutions, and SIEM integration, with a proven ability to protect enterprise environments against evolving cyber threats.
Key Responsibilities<ul><li>
Design, implement, and manage API security solutions across enterprise environments
</li><li>Configure and maintain API Gateways (e.g., F5, Kong, IBM DataPower)
</li><li>Implement and manage IDS/IPS systems for threat detection and prevention
</li><li>Integrate security solutions with SIEM platforms for monitoring and incident response
</li><li>Develop and enforce API security policies, including rate limiting, authentication, and threat protection
</li><li>Secure APIs by identifying and blocking malicious patterns and automated bot attacks
</li><li>Perform security assessments, vulnerability analysis, and risk mitigation
</li><li>Collaborate with cross-functional teams to ensure secure application delivery</li></ul> 

Requirements 
Minimum 5+ years of experience in API security and network security
Hands-on experience with:
<ul><li>F5 / Kong / IBM DataPower API Gateways
</li><li>IDS/IPS solutions
</li><li>SIEM integration
</li></ul>Strong understanding of:
<ul><li>API security best practices
</li><li>Network security architecture
</li><li>Threat detection and mitigation techniques
</li></ul>Experience in securing APIs against common attack vectors (OWASP, bot attacks, etc.)
Relevant security certifications are mandatory:
<ul><li>CISSP
</li><li>GICSP
</li><li>Or equivalent</li></ul></div>

Senior API Security Engineer - Riyadh, KSA

Saronic Technologies

<div><div><h2 class="jobSectionHeader">Location</h2>
Austin, TX
</div><div><h2 class="jobSectionHeader">Employment Type</h2>
Full time
</div><div><h2 class="jobSectionHeader">Location Type</h2>
On-site
</div><div><h2 class="jobSectionHeader">Department</h2>
Software</div></div>
 <div><div>Saronic Technologies is a leader in revolutionizing autonomy at sea, dedicated to developing state-of-the-art solutions that enhance maritime operations through autonomous and intelligent platforms.
Security at Saronic is a force multiplier. We're seeking a Security Engineer at the senior-level or above on our Security Operations team with strong detection engineering experience. You'll design and develop high-fidelity detection content, build and operate the data pipelines that power our security operations, develop automation playbooks that accelerate response, and work across a uniquely diverse telemetry landscape spanning cloud infrastructure, embedded vessel platforms, corporate systems, and operational technology. 
<div></div>This role is heavily weighted toward detection engineering. You should think in terms of adversary behavior and telemetry coverage, not just alert triage. You'll own detections end-to-end: from identifying gaps in coverage, through designing and testing detection logic, to tuning and validating in production.
<h1 class="jobSectionHeader">Key Responsibilities:</h1>
<ul><li>Design, build, test, and tune high-fidelity detection rules and analytic queries across endpoint, cloud, network, identity, and DLP telemetry sources
</li><li>Develop and maintain detection content using detection-as-code practices including version-controlled logic, automated testing, and CI/CD deployment
</li><li>Map detection coverage to MITRE ATT&amp;CK, identify gaps, and prioritize new detection development based on threat intelligence and business risk
</li><li>Engineer correlation rules, behavioral analytics, and anomaly-based detections that minimize false positives while surfacing real adversary tradecraft
</li><li>Own the detection lifecycle from initial development through production tuning, performance monitoring, and retirement
</li><li>Build and operate pipelines to ingest, normalize, enrich, and manage security telemetry at scale across diverse data sources, using Terraform and infrastructure-as-code practices to deploy and maintain logging and detection infrastructure
</li><li>Design and maintain log collection, parsing, and enrichment configurations that ensure the right telemetry is available at the right fidelity for detection and investigation
</li><li>Evaluate and onboard new telemetry sources as Saronic's infrastructure and threat landscape evolve
</li><li>Monitor pipeline health, data quality, and ingestion reliability to ensure detections operate on complete and accurate data
</li><li>Develop and manage automated response playbooks in SOAR platforms to accelerate containment and reduce analyst toil
</li><li>Build automation that enriches alerts with contextual data, reducing investigation time and improving analyst decision-making
</li><li>Support incident response efforts and translate lessons learned into improved detections and playbooks
</li><li>Partner with SOC analysts, Cloud Security, Product Security, and IT teams to close visibility and detection gaps across environments
</li><li>Collaborate with threat intelligence to ensure detection engineering is informed by current adversary TTPs relevant to defense, maritime, and autonomous systems
</li></ul><h1 class="jobSectionHeader">Required Qualifications:</h1>
<ul><li>3+ years of hands-on experience in detection engineering, security operations, security automation, or a closely related security engineering role
</li><li>Demonstrated experience designing, testing, and tuning detection rules and analytic queries across production security telemetry (endpoint, cloud, network, identity, or DLP)
</li><li>Hands-on experience with SIEM platforms and proficiency with query languages such as SPL, KQL, or equivalent
</li><li>Experience building and operating security data pipelines, including log ingestion, normalization, enrichment, and data quality management
</li><li>Understanding of data engineering concepts including ETL pipelines, data modeling, schema design, and indexing as applied to security telemetry
</li><li>Hands-on coding experience in Python, PowerShell, Go, or Rust for security automation, detection tooling, or pipeline development, and familiarity with Terraform for managing detection and logging infrastructure as code
</li><li>Understanding of MITRE ATT&amp;CK framework and its application to detection coverage and gap analysis
</li><li>Ability to obtain and maintain a security clearance
</li></ul><h1 class="jobSectionHeader">Preferred Qualifications:</h1>
<ul><li>Experience in defense, aerospace, robotics, autonomy, or other high-assurance environments
</li><li>Experience with EDR platforms including custom detection rule creation and telemetry analysis
</li><li>Experience with cloud-native detection in AWS and Microsoft 365/Azure
</li><li>Experience using Terraform to deploy and manage security monitoring infrastructure, log pipeline components, or cloud-native security service configurations
</li><li>Hands-on experience with incident response, threat hunting, or adversary emulation
</li><li>Exposure to embedded Linux, operational technology, or ICS telemetry and detection
</li><li>Familiarity with NIST SP 800-171, NIST SP 800-53, or CMMC and their logging and monitoring requirements
</li><li>Relevant certifications such as GCIH, GCIA, GCDA, GSOM, OSDA, or OSCP
</li></ul><h1 class="jobSectionHeader">Benefits:</h1>
<ul><li>Medical Insurance: Comprehensive health insurance plans covering a range of services
</li><li>Saronic pays 100% of the premium for employees and 80% for dependents
</li><li>Dental and Vision Insurance: Coverage for routine dental check-ups, orthodontics, and vision care
</li><li>Saronic pays 100% of the premium under the basic plan for employees and 80% for dependents
</li><li>Time Off: Generous PTO and Holidays
</li><li>Parental Leave: Paid maternity and paternity leave to support new parents
</li><li>Competitive Salary: Industry-standard salaries with opportunities for performance-based bonuses
</li><li>Retirement Plan: 401(k) plan
</li><li>Stock Options: Equity options to give employees a stake in the company&rsquo;s success
</li><li>Life and Disability Insurance: Basic life insurance and short- and long-term disability coverage
</li><li>Pet Insurance: Discounted pet insurance options including 24/7 Telehealth helpline
</li><li>Additional Perks: Free lunch benefit and unlimited free drinks and snacks in the office 
</li></ul><div></div>This role requires access to export-controlled information or items that require &ldquo;U.S. Person&rdquo; status. As defined by U.S. law, individuals who are any one of the following are considered to be a &ldquo;U.S. Person&rdquo;: (1) U.S. citizens, (2) legal permanent residents (a.k.a. green card holders), and (3) certain protected classes of asylees and refugees, as defined in 8 U.S.C. 1324b(a)(3).
Saronic does not discriminate on the basis of race, sex, color, religion, age, national origin, marital status, disability, veteran status, genetic information, sexual orientation, gender identity or any other reason prohibited by law in provision of employment opportunities and benefits.</div></div>

Security Engineer, Detection Engineering

PartnerOne

<div>
 
 About Us
 
 
 
 NetWitness has been at the forefront of cybersecurity for over two decades, delivering industry-leading solutions in Network Forensics, Network Detection &amp; Response (NDR), SIEM, UEBA, and SOAR, alongside best-in-class Incident Response services. Our platform empowers organizations to detect, investigate, and respond to the most sophisticated threats targeting their networks and critical assets.
 
 
 
 Role Overview
 
 
 
 The role is for a NetWitness Presales Engineer based in Egypt covering Africa.
 
 
 As a ore-sales Systems Engineer, you will play a pivotal role in driving the adoption of our solutions and services. You will be the primary technical voice in the sales cycle, acting as a trusted advisor to customers while working hand-in-hand with the regional sales team. You will bridge the gap between complex cybersecurity challenges and the NetWitness platform, translating technical capabilities into clear business value.
 
 
 This role demands both deep technical expertise and strong interpersonal skills. You will own Proof-of-Concept engagements, lead executive and technical presentations, and actively contribute to the broader NetWitness community through industry events, workshops, and partner enablement.
 
 
 
 Key Responsibilities
 
 
 
 
 Technical Sales Engagement
 
 
 
 <ul>
 <li>
 Serve as the primary technical point of contact throughout the sales cycle
 </li>
 <li>
 Partner with the sales team to develop and execute winning sales strategies
 </li>
 <li>
 Lead in-depth technical presentations and product demonstrations, effectively communicating both technical depth and business value
 </li>
 <li>
 Respond o RFPs and RFIs, crafting compelling technical proposals and solution architectures
 
 
 </li>
 </ul>
 
 Customer Success &amp; Advisory
 
 
 
 <ul>
 <li>
 Build and maintain trusted advisor relationships with key technical and executive stakeholders
 </li>
 <li>
 Conduct discovery sessions to understand customer security challenges, infrastructure, and strategic goals, then design tailored NetWitness solutions
 </li>
 <li>
 Design, deploy, and manage Proof-of-Concept (POC) evaluations, ensuring measurable, documented outcomes
 </li>
 <li>
 Deliver health-checks, workshops, and technical roadmap sessions for existing customers to retain and expand their NetWitness footprint
 
 
 </li>
 </ul>
 
 Ecosystem &amp; Enablement
 
 
 
 <ul>
 <li>
 Own and develop the technical partner relationships within the assigned territory, including enablement and joint POC support
 </li>
 <li>
 Provide technical training and mentoring to sales team members and channel partners
 </li>
 <li>
 Represent NetWitness at industry events, trade shows, conferences, and seminars &mdash; delivering presentations and generating pipeline
 
 
 </li>
 </ul>
 
 Product &amp; Market Intelligence
 
 
 
 <ul>
 <li>
 Maintain deep, current knowledge of the NetWitness platform, competitive landscape, and adjacent security technologies
 </li>
 <li>
 Stay ahead of emerging threats, attack techniques, and industry trends to deliver relevant, credible technical discussions
 </li>
 <li>
 Serve as the voice of the customer to product management and engineering, relaying field insights, feature gaps, and competitive intelligence to influence the product roadmap
 
 
 </li>
 </ul>
 
 Requirements
 
 
 
 <ul>
 <li>
 3+ years of experience in a presales, sales engineering, security consulting, or similar customer-facing technical role within the cybersecurity industry
 </li>
 <li>
 Demonstrable experience working with the Government, Enterprise, and Financial sectors in Egypt and Africa
 </li>
 <li>
 Deep understanding of networking protocols, network security architectures, and packet-level analysis
 </li>
 <li>
 Strong knowledge of threat detection methodologies, MITRE ATT&amp;CK framework, incident response processes, and common attack techniques (living-off-the-land, lateral movement, C2, etc.)
 </li>
 <li>
 Exposure to threat hunting, detection engineering, or SOC operations
 </li>
 <li>
 Industry certifications: CISSP, CISM, CEH, GCIH, GCIA, GDAT, or equivalent SANS/GIAC credentials
 </li>
 <li>
 Hands-on experience with one or more Threat Detection &amp; Response platforms: SIEM, NDR, EDR
 </li>
 <li>
 Proven ability to design and execute effective POCs, including success criteria definition and executive-level readout
 </li>
 <li>
 Excellent communication and presentation skills, able to adapt messaging for both CISO-level executives and SOC analysts
 </li>
 <li>
 Familiarity with Linux CLI, basic scripting (Python/Bash), and log/packet analysis workflows
 </li>
 <li>
 Willingness to travel up to 30% across the territory
 </li>
 <li>
 Full professional fluency in English and Arabic is a must, both written and spoken. Fluency in French is a plus
 </li>
 </ul>
</div>

Systems Engineer

Partner One Capital

<div>About Us
NetWitness has been at the forefront of cybersecurity for over two decades, delivering industry-leading solutions in Network Forensics, Network Detection &amp; Response (NDR), SIEM, UEBA, and SOAR, alongside best-in-class Incident Response services. Our platform empowers organizations to detect, investigate, and respond to the most sophisticated threats targeting their networks and critical assets. 

Role Overview
The role is for a NetWitness Presales Engineer based in Egypt covering Africa.
As a ore-sales Systems Engineer, you will play a pivotal role in driving the adoption of our solutions and services. You will be the primary technical voice in the sales cycle, acting as a trusted advisor to customers while working hand-in-hand with the regional sales team. You will bridge the gap between complex cybersecurity challenges and the NetWitness platform, translating technical capabilities into clear business value.
This role demands both deep technical expertise and strong interpersonal skills. You will own Proof-of-Concept engagements, lead executive and technical presentations, and actively contribute to the broader NetWitness community through industry events, workshops, and partner enablement. 

Key Responsibilities
Technical Sales Engagement<ul><li>Serve as the primary technical point of contact throughout the sales cycle.</li><li>Partner with the sales team to develop and execute winning sales strategies.</li><li>Lead in-depth technical presentations and product demonstrations, effectively communicating both technical depth and business value.</li><li>Respond o RFPs and RFIs, crafting compelling technical proposals and solution architectures.</li></ul> 
Customer Success &amp; Advisory<ul><li>Build and maintain trusted advisor relationships with key technical and executive stakeholders.</li><li>Conduct discovery sessions to understand customer security challenges, infrastructure, and strategic goals, then design tailored NetWitness solutions.</li><li>Design, deploy, and manage Proof-of-Concept (POC) evaluations, ensuring measurable, documented outcomes.</li><li>Deliver health-checks, workshops, and technical roadmap sessions for existing customers to retain and expand their NetWitness footprint.</li></ul> 
Ecosystem &amp; Enablement<ul><li>Own and develop the technical partner relationships within the assigned territory, including enablement and joint POC support.</li><li>Provide technical training and mentoring to sales team members and channel partners.</li><li>Represent NetWitness at industry events, trade shows, conferences, and seminars &mdash; delivering presentations and generating pipeline.</li></ul> 
Product &amp; Market Intelligence<ul><li>Maintain deep, current knowledge of the NetWitness platform, competitive landscape, and adjacent security technologies.</li><li>Stay ahead of emerging threats, attack techniques, and industry trends to deliver relevant, credible technical discussions.</li><li>Serve as the voice of the customer to product management and engineering, relaying field insights, feature gaps, and competitive intelligence to influence the product roadmap.</li></ul> 
Requirements<ul><li> 
3+ years of experience in a presales, sales engineering, security consulting, or similar customer-facing technical role within the cybersecurity industry.</li><li>Demonstrable experience working with the Government, Enterprise, and Financial sectors in Egypt and Africa.</li><li>Deep understanding of networking protocols, network security architectures, and packet-level analysis.</li><li>Strong knowledge of threat detection methodologies, MITRE ATT&amp;CK framework, incident response processes, and common attack techniques (living-off-the-land, lateral movement, C2, etc.).</li><li>Exposure to threat hunting, detection engineering, or SOC operations.</li><li>Industry certifications: CISSP, CISM, CEH, GCIH, GCIA, GDAT, or equivalent SANS/GIAC credentials.</li><li>Hands-on experience with one or more Threat Detection &amp; Response platforms: SIEM, NDR, EDR.</li><li>Proven ability to design and execute effective POCs, including success criteria definition and executive-level readout.</li><li>Excellent communication and presentation skills, able to adapt messaging for both CISO-level executives and SOC analysts.</li><li>Familiarity with Linux CLI, basic scripting (Python/Bash), and log/packet analysis workflows.</li><li>Willingness to travel up to 30% across the territory.</li><li>Full professional fluency in English and Arabic is a must, both written and spoken. Fluency in French is a plus.</li></ul></div>

Search 4606+ Threat detection engineer jobs near you this May. New roles added regularly across leading industries. Apply today.

4606 threat detection engineer jobs Near Me

Detection Engineer

Software Development Engineer II, Security Products

Cybersecurity Program Lead

Senior API Security Engineer - Riyadh, KSA

Security Engineer, Detection Engineering

Systems Engineer

Systems Engineer