Cybersecurity Engineer
As a Cybersecurity Engineer, you bring deep expertise in incident response, detection engineering and forensics across Windows/Linux/cloud environments/network. You hold certifications like Certified Incident Handler, Certified Forensic Analyst, and Certified Cloud Forensics Responder and you are skilled in software development. You excel at building production-grade detection systems that catch sophisticated threats across hybrid infrastructure and turn forensic insights into real-time defenses.
You will be one of Haste's first detection engineers pioneering lightning-fast threat analysis for HPC clusters, AI and quantum workloads.
Key responsibilities:
- Detection Content Development: Develop, test, and tune detection rules to identify malicious activity, focusing on behavior-based logic rather than simple indicators.
- Threat Intelligence Integration: Translate threat intelligence and recent research findings into actionable detection rules to proactively mitigate emerging threats.
- Forensic-Driven Detection: Utilize digital forensics and incident investigation experience to identify gaps in existing coverage and create detections based on root cause analysis.
- False Positive Reduction: Continuously refine and optimize detection logic.
- Adversary Simulation: Conduct Purple Team exercises and simulate adversary techniques to validate the effectiveness of detection rules on our partner simulation platform and help run PoCs with customers.
- Automation & Scripting: Develop scripts to automate detection deployment.
- Data Source Engineering: Collaborate with DevOps/design and research teams to identify, normalize, ingest relevant data sources and collaborate on taxonomy development for A structured classification system used to organize, label, and analyze cyber threats based on their characteristics, behaviors, and impact:
- Documentation & Reporting: Maintain detailed documentation for detection logic and taxonomy.
What it's like working with us:
- Impact from day oneYour work shapes how we protect current and future infrastructure.
- Top Tier-expertsJoin security veterans solving globally unique problems in threat detection for the future of compute.
- Fully remote, real ownershipWe care about results, not clock-in times.
Location: Remote (within Europe)
A CV or a profile link is enough. Applicant privacy information: section 4 of the privacy notice.