Detection Engineer

About the Job

At the Allianz Cyber Defense Center (ACDC), we are transforming cyber defense into an intelligence-driven, proactive capability. As our Senior Cyber Detection Expert, you will be the highest technical authority for threat detection, shaping how Allianz detects and responds to cyber threats across a global environment.

This is a strategic and hands-on role where you will define the target detection landscape, influence detection engineering standards, and transform threat intelligence and hunting insights into scalable detection coverage. Working at the intersection of Threat Intelligence, Threat Hunting, Security Operations, and Engineering, you will directly impact the security posture of one of the world's largest financial services organizations.

What You Do

• Define and maintain the strategic detection landscape, ensuring coverage remains aligned with evolving threats, adversary behaviors, and business risks.
• Act as the senior technical authority for detection engineering, setting standards, methodologies, and best practices across the Detection Cluster.
• Lead the design and optimization of advanced SIEM detection use cases, balancing effectiveness, performance, and operational sustainability.
• Own detection coverage assessments and gap analyses, leveraging frameworks such as MITRE ATT&CK and threat intelligence insights.
• Maintain oversight of the security telemetry landscape, identifying critical data gaps and driving the onboarding of new data sources.
• Translate threat intelligence, threat hunting findings, and adversary simulation results into high-quality production detections.
• Design and implement multi-domain detection strategies spanning endpoint, identity, cloud, network, and application security environments.

What You Bring

• Extensive experience in Detection Engineering, Cyber Defense, Security Monitoring, or Threat Detection within complex enterprise environments.
• Deep expertise in SIEM technologies, including log management, event correlation, detection logic development, and security data analysis.
• Strong understanding of adversary tactics, techniques, and procedures (TTPs), with hands-on knowledge of frameworks such as MITRE ATT&CK.
• Proven experience developing, tuning, and maintaining detection content while minimizing false positives and alert fatigue.
• Experience translating threat intelligence and threat hunting outcomes into actionable and scalable detection capabilities.
• Strong analytical, problem-solving, and communication skills, with the ability to influence both technical teams and senior stakeholders.
• Familiarity with modern detection engineering practices such as Detection-as-Code, behavioral analytics, automation, and AI-assisted security operations.