Publié il y a 3 jours
Detection Engineer
@ Arobas Personnel Inc.
Montréal, Québec
En bref
Arobas Personnel is hiring a Detection Engineer on a contract basis for one of its clients in Montreal. The role supports a Splunk-based detection environment, tuning rules and building new detections mapped to MITRE ATT&CK, and works closely with Incident Response, CTI, SOC and Red Team teams.
Responsabilités :
- Tune Splunk rules from Incident Response requests
- Design and deploy new detections from CTI-provided TTPs
- Map detections to MITRE ATT&CK coverage
- Develop detection content for Purple Team exercises
- Track and close work items in Jira
Résumé des exigences :
- Strong hands-on Splunk experience including SPL and data models
- Proven SIEM detection engineering in production
- Working knowledge of MITRE ATT&CK
- Familiarity with EDR, Windows/Linux, network and cloud logs
- Threat hunting experience with CTI IOCs and TTPs
Outils et compétences
Source et dates
Type de source non vérifié · tbe
- Date publiée par l’employeur
- 2026-11-04
- Première détection par notre source
- 2026-11-04
- Mise à jour du dossier source
- 2026-11-04
Ces dates décrivent le dossier source, pas une vérification en direct du recrutement. Consultez l’offre originale.
Détails du poste
| Niveau | Senior |
| Domaine | Développement logiciel |
| Heures par semaine | 40 (estimé) |
| Déplacements | avion : aucun · route : aucun |
| Milieu de travail | Bureau |
| Position | Surtout assis |
| Exigences physiques | physique faible · ordinateur élevé |
| Langues | English |
Résumé et détails rédigés par l’IA à partir de l’offre; l’offre de l’employeur fait foi.
Arobas Personnel Inc.
Profil d’entreprise sauvegardé
Renseignements historiques provenant d’un profil The Jobs API sauvegardé (champs LinkedIn/Crunchbase). Ils ne sont pas vérifiés en temps réel; les chiffres peuvent avoir changé. Les valeurs manquantes restent inconnues.
Arobas est une firme spécialisée en recrutement et en services-conseils TI/IA.
Description complète de l’entreprise
For over 25 years, Arobas Personnel has supported organizations across Canada, the United States, and internationally in talent acquisition, specialized recruitment, and IT/AI consulting services. We deliver recruitment solutions and executive leadership hiring. Our AMP and Controlled Goods (CGC) certifications ensure rigorous, compliant processes tailored to public, parapublic, and highly regulated sectors. Alongside our local recruitment services, we offer a global offshore staffing program, giving companies access to highly skilled professionals while achieving significant cost savings. Fast, reliable, and results-driven, Arobas acts as a strategic partner for organizations seeking efficient, high-impact recruitment solutions aligned with their business objectives. Permit number : AP-2000563
- Abonnés LinkedIn
- 17 626
- Personnes associées sur LinkedIn
- 37
- Bureaux déclarés
- Montréal, Québec, CA
- Orlando, Florida, US
- Paris, FR
- Autres noms enregistrés
- Arobas Personnel
- Spécialités
- recrutement
- services-conseils
- placement de personnel
- Location de personnel
- C-level executive
- Information Technology
- Headhunting
- informatique
- technologie de l'information
- Projets informatique
- IT staffing
- recruiter
- sourcing
- agence de recrutement
- Staff augmentation
- contract staffing
- offshore staffing
- and Services conseil IA
- Le profil indique une agence de recrutement
- Oui
For over 25 years, Arobas Personnel has supported organizations across Canada, the United States, and internationally in talent acquisition, specialized recruitment, and IT/AI consulting services. We deliver recruitment solutions and executive leadership hiring. Our AMP and Controlled Goods (CGC) certifications ensure rigorous, compliant processes tailored to public, parapublic, and highly regulated sectors…
| Champ | Valeur |
|---|---|
| Secteur | Staffing and Recruiting |
| Taille | 51-200 employees |
| Siège social | Montréal, Québec |
| Type d’organisation | Privately Held |
| Fondée en | 2001 |
| Spécialités | recrutementservices-conseilsplacement de personnelLocation de personnelC-level executiveInformation TechnologyHeadhuntinginformatiquetechnologie de l'informationProjets informatique |
| Offres sur Jobsy | 47 |
| Voir la page |
Arobas Personnel is looking for an experienced Detection Engineer for a contract opportunity with one of our clients in Montreal.
The Detection Engineer will support the organization’s Splunk-based detection environment, working closely with Incident Response, Cyber Threat Intelligence, SOC, and Red Team stakeholders to strengthen detection coverage and improve the quality of security detections.
Key Responsibilities :
🔹 Ensure operational continuity of the Splunk-based detection stack
🔹 Review and implement rule tuning requests from the Incident Response team, including false-positive reduction, logic refinement, and threshold adjustments
🔹 Design, develop, and deploy new Splunk detections based on threat patterns, indicators, and TTPs provided by the CTI team
🔹 Map new and existing detections to MITRE ATT&CK to track detection coverage
🔹 Develop and refine detection content for Purple Team exercises, incorporating identified gaps and post-exercise improvements
🔹 Test and validate detection effectiveness before production deployment, including true-positive validation and noise reduction
🔹 Maintain detection logic under version control and document tuning rationale
🔹 Track and manage work items in Jira
🔹 Participate in handoffs and collaboration sessions with Incident Response, CTI, SOC, and Red Team stakeholders
Key Deliverables :
🔹 Tuned and updated Splunk detection rules addressing Incident Response requests, with documented rationale
🔹 New detection use cases covering CTI-identified threat patterns, mapped to MITRE ATT&CK
🔹 Detection content supporting Purple Team exercises, including post-exercise improvements
🔹 Up-to-date documentation of detection logic and coverage gaps
🔹 Work items properly tracked and closed in Jira
Must-Have Skills :
🔹 Strong hands-on experience with Splunk, including SPL, correlation searches, dashboards, data models, and detection-as-code workflows
🔹 Proven Detection Engineering experience writing, tuning, and validating SIEM detection rules in a production environment
🔹 Working knowledge of MITRE ATT&CK for threat modeling and coverage mapping
🔹 Familiarity with relevant security telemetry and log sources, including EDR, Windows/Linux/Sysmon, network, and cloud logs
🔹 Experience with Threat Hunting methodologies and CTI-provided IOCs/TTPs, including structured intelligence such as STIX/TAXII or narrative reporting
🔹 Understanding of Incident Response processes and the ability to translate tuning requests into actionable detection rule changes
Nice to Have :
🔹 Exposure to Purple Teaming and adversary emulation, including tools or approaches such as Atomic Red Team and Caldera
🔹 Scripting skills with Python and/or PowerShell for detection logic, automation, and tooling
🔹 Experience with Git for managing detection content as code
🔹 Experience with Jira in an Agile or operational environment
🔹 Ability to clearly document technical decisions and rationale for handoff to technical teams and management
Journal
Visible seulement par vous. Conservé sur cet appareil, et dans votre compte une fois connecté.