Continuously improve detection capabilities to increase visibility and reduce security risk.
Define and maintain telemetry and logging requirements needed for effective threat detection.
Work with internal teams and external security providers to improve detection quality and operational effectiveness.
Support threat hunting, incident response, and investigations by providing detection expertise and insights.
Develop and maintain threat-informed detection strategies aligned with frameworks such as MITRE ATT&CK.
Promote detection engineering best practices, including version control, testing, peer reviews, and automation.
Track and report on detection coverage, effectiveness, and key performance metrics.
What You Will Bring to Cabot
5+ years in security operations, detection engineering, or threat detection, with clear depth in detection content development.
Deep hands-on expertise with a major enterprise SIEM (for example Splunk, Microsoft Sentinel, Elastic, Trellix, QRadar, or equivalent).
Proven detection-content development and tuning at scale.
Strong command of MITRE ATT&CK, log pipelines, and threat detection methodology.
Experience working alongside or governing a managed detection provider (MDR / MSSP).
Scripting and query fluency (Python, a SIEM query language such as KQL or SPL, and regex).
Excellent written and spoken English; this is our working language across a global team.
Experience That Strongly Aligns
Global industrial, manufacturing, or OT-adjacent environments.
Security platform migration or consolidation programs.
Maturing or scaling a detection engineering capability.
Additional Experience (Nice to Have)
Industry certifications: GCDA, GCIA, GCDN, Splunk or Sentinel certifications, OSCP.
Familiarity with security frameworks (NIST CSF, MITRE ATT&CK).
Measures of Success
MITRE ATT&CK coverage of relevant techniques.
Improvement in mean time to detect and respond (MTTD / MTTR).
Reduction in false-positive rate and analyst noise.
Successful platform onboarding and tuning milestones.
Quality of partner escalations measured against the defined bar.
Additional Information
Working hours: 9:00–17:30. Occasional flexibility outside standard working hours may be needed to support critical cybersecurity initiatives, major platform changes, or incident response activities.
Permanent contract.
Salary: EUR 2,700–3,900 gross per month. The final salary offer will depend on the candidate’s previous experience and qualifications.
Health insurance from the first day of employment.
Monthly allowance and annual bonus.
Hybrid work schedule: 3 days on site and 2 days working from home.
How We’ll Support Your Success
Dynamic, Flexible, Hard Working, Team Environment – We are busy, collaborative, growing, and we are doing really meaningful work.
Hybrid Work Environment – The autonomy to both work from home 2 days a week and develop/sustain colleague relationships in the office 3 days a week.
Benefits, Vacation, Etc.– We offer a competitive package of benefits.
Feedback – we are committed to giving and receiving feedback in a direct and open fashion.
Support– you are part of a team and deserve to feel encouraged and supported. You will be part of a team that cares about you personally and professionally. Our success depends on your success.
#LI-HYBRID
At Cabot, we bring the power of innovative chemistry and a spirit of partnership with our customers to advance solutions that will enable a sustainable future. Our strength in research and development is a major reason why we have been an industry leader for more than 135 years in products such as reinforcing and specialty carbons, battery materials, aerogel, fumed metal oxides, inkjet colorants, masterbatches and conductive compounds.
Our employees around the world are united by our shared purpose: Creating materials that improve daily life and enable a more sustainable future. Through our corporate strategy, “Creating for Tomorrow,” we are focused on our core strengths to lead in performance and sustainability – today and into the future.
