Senior Security Engineer - Detection

SWIFT

Leiden, Netherlands

Our Cyber Threat Management team is looking for an experienced and highly technical Senior Detection Engineer to help strengthen and advance our threat detection capabilities. This is an opportunity to work at the forefront of cybersecurity, developing high-fidelity detections that identify sophisticated adversary activity across enterprise, cloud and hybrid environments.

This role is ideal for someone who is passionate about detection engineering, threat hunting and adversary-focused defence. You will play a key role in transforming threat intelligence and attacker behaviours into actionable detection content that helps protect one of the world's most critical financial infrastructures.

What to Expect

In this role, you will:

Design, develop and continuously improve detection logic across SIEM, EDR/XDR and cloud security platforms.
Translate threat intelligence, threat hunting findings and emerging adversary techniques into effective, measurable detections.
Develop and maintain detection content aligned to frameworks such as MITRE ATT&CK.
Measure and improve detection coverage, effectiveness and fidelity across the organisation.
Partner closely with Threat Intelligence, Incident Response and Security Operations teams to identify and close detection gaps.
Validate detections through purple team exercises, adversary emulation and attack simulations.
Optimise existing detections to reduce false positives and improve analyst experience.
Contribute to the development of detection engineering standards, tooling and best practices.
Support the integration and enhancement of SIEM, EDR/XDR and cloud-native security technologies.
Mentor junior engineers and help raise the technical capability of the wider Cyber Threat Management team.
Stay current with emerging threats, attacker tradecraft and detection engineering techniques.

What Success Looks Like

Within your first year, you will:

Expand detection coverage across key attack techniques and adversary behaviours.
Improve detection fidelity while reducing operational noise.
Develop new detections that address emerging threats relevant to Swift's environment.
Help mature our detection engineering lifecycle, testing practices and content management processes.
Become a trusted technical advisor on threat detection and detection engineering across the organisation.

Who This Role Is For

You may currently be working as a:

Detection Engineer
Threat Hunter
Detection Content Engineer
Purple Team Engineer
Senior Security Detection Engineer
Senior SOC Engineer with significant detection development responsibilities
Security Engineer focused on detection content and adversary detection

If the majority of your time is spent building, validating and improving detections rather than monitoring alerts, this role is likely a strong fit.

What Will Make You Successful

We are looking for professionals with:

5+ years of cybersecurity experience, including significant hands-on experience in threat detection engineering, threat hunting or closely related disciplines.
Experience designing, implementing and maintaining detection content within SIEM platforms such as Splunk, Microsoft Sentinel, Elastic, Chronicle or similar technologies.
Strong understanding of attacker tactics, techniques and procedures (TTPs) and the MITRE ATT&CK framework.
Experience developing detections using endpoint, network, identity, cloud and application telemetry.
Hands-on experience with EDR/XDR platforms and endpoint detection methodologies.
Experience translating threat intelligence and threat hunting outcomes into operational detection content.
Knowledge of detection-as-code principles, content lifecycle management and automated testing approaches.
Familiarity with cloud security monitoring and detection use cases across modern cloud environments.
Strong analytical, investigative and problem-solving skills.
Excellent communication and stakeholder management skills.
Experience mentoring and developing junior engineers.