Detection Engineer

Darktrace is a global leader in AI-driven cybersecurity, helping organizations stay ahead of evolving threats every day.

Darktrace was built on a genuinely differentiated idea: that Adaptive AI could detect and respond to novel, real-time cyber threats. That approach matters more than ever in the era of AI.  Today, our customers depend on us to stay ahead.

At Darktrace, we are energized by that responsibility.  We work across teams and rally around a shared goal. We own outcomes end to end - step in, step up and see things through without waiting to be asked.   We make decisions with urgency, say the hard thing, and hold each other to high standards with care and directness. We move first and learn fast anticipating where our customers are going next, continuously challenging ourselves.

We invest in the skills, learning and opportunities that help people deliver at the level their roles demand, and reward the aptitude and curiosity to grow beyond them.

Our Values: Own It | Win as One | Raise Our Bar | Move First. Learn Fast

Job Description:

This role would suit someone with hands-on cybersecurity experience who enjoys investigating threats, solving complex problems and continuously improving detection capabilities.

What will I be doing?

As a Detection Engineer, you’ll join a global team responsible for the continuous development and improvement of our threat detection capabilities across a range of key product areas. You’ll respond to customer requests and incidents, analyse cyber threat intelligence, and use your findings to continually improve our detection coverage.

You’ll be expected to

- Develop and expand detection schemes to support new products and areas of coverage, aligning detections with relevant threats and attack techniques.

- Analyse cybersecurity incidents and emerging adversary techniques to identify opportunities for new detections and improvements to existing coverage.

- Support customer investigations and incident response activities, prioritising time-sensitive and high-priority issues.

- Collaborate with Development, Security Research, SOC and customer-facing teams to improve detection quality, investigative workflows, internal tooling and processes.

You’ll have the autonomy to drive the development of new detections and take ownership of identifying areas where our existing detection sets can be improved.

What experience do I need?

You’ll have hands-on experience using security platforms to conduct thorough incident investigations, with a strong understanding of cybersecurity concepts and networking. You’ll also be comfortable analysing endpoint telemetry to identify suspicious activity, validate detections and support incident response.

Ideally, your experience will include

- Analysing telemetry across one or more additional domains, such as Network, Identity, SaaS, Cloud or OT environments.

- Reviewing, assessing, developing, tuning or maintaining threat detection logic.

- Strong analytical and creative problem-solving skills.

- Strong time management, prioritisation and attention to detail.

You’ll be comfortable working independently and proactively, taking ownership of your work and driving improvements to detection sets. A genuine interest in keeping up to date with the latest cybersecurity threats, techniques and trends is also important.

Beneficial skills

It would be beneficial if you have experience with some of the following:

- Darktrace products, such as Network, Identity, Cloud, Response or Endpoint.

- Working within a Managed SOC, Incident Response or Detection Engineering team.

- GitLab or a similar version-control platform.

- Data analysis, statistics, or developing tooling and automation using Python or other programming languages. Benefits:

- 23 days’ holiday + all public holidays, rising to 25 days after 2 years of service,

- Additional day off for your birthday,

- Private medical insurance which covers you, your cohabiting partner and children,

- Life insurance of 4 times your base salary,

- Salary sacrifice pension scheme,

- Enhanced family leave,

- Confidential Employee Assistance Program,

- Cycle to work scheme.

As a growing business strengthening its governance and controls, this role plays a part in supporting high standards of integrity and accountability.

Darktrace is an Equal Opportunity Employer. We consider all qualified applicants for employment without regard to race, color, religion, sex (including pregnancy, childbirth, and related medical conditions), sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, veteran or military status, or any other characteristic protected by applicable federal, state, or local law.

Darktrace is committed to providing reasonable accommodations to qualified individuals with disabilities in accordance with applicable laws. If you require a reasonable accommodation to participate in the application or interview process, please contact your Talent Partner.