Detection Engineer - Hybrid

Stack

Responsibilities

• ▹Develop new use cases and detection rules based on threat intelligence and the MITRE ATT&CK framework
• ▹Own the full detection lifecycle: from concept through testing and deployment to documentation
• ▹Continuously tune existing rule sets to reduce false positives
• ▹Design and implement SOAR playbooks to automate routine tasks
• ▹Conduct proactive threat hunting for anomalies not yet caught by automated rules
• ▹Provide third-level support to SOC analysts in evaluating complex security events
• ▹Maintain detection rules as code in version control (e.g. Git) and support CI/CD pipeline setup

Requirements

• ▹Completed IT-focused vocational training or a technical degree (e.g. computer science, IT security)
• ▹Several years of experience in a Security Operations Center (SOC) environment
• ▹Solid knowledge of pentesting, red or purple teaming
• ▹Expert-level knowledge in recognizing and analyzing attack vectors in log data
• ▹Several years of hands-on experience in detection engineering / threat detection
• ▹Experience developing, optimizing, and documenting custom detection rules

Nice to have

• ▹OSCP or comparable certification
• ▹Experience with Google SecOps (formerly Chronicle)

Soft skills

What we offer

• ▹Modern office in southern Munich with Alpine views, industrial-loft style
• ▹Hybrid model: 2 days office, 3 days remote, home-office equipment provided
• ▹Excellent public transport connections
• ▹Fitness perks (Urban Sports Club, Hansefit)
• ▹Bike-friendly setup with secure parking, showers, Jobrad program
• ▹Sustainability: green-power data centers, LEED Gold certified office

About the company

Argos Security (formerly indevis, merged with Data-Sec since 2025) is one of Germany's leading managed security service providers (MSSP), based in Munich, with over 25 years of experience and its own 24/7 SOC.