Cyber Data Analyst – Detection Engineering

Role overview

This position is for an experienced Cyber Data Analyst focused on detection engineering. The role centers on making sense of large security data sets, improving analytics for security operations, and helping strengthen detection and response capabilities in an enterprise environment. A strong analytical approach, solid programming ability, and practical exposure to SOC work, threat detection, and telemetry analysis are essential.

What you will do

• Review and interpret high-volume cybersecurity data coming from several security tools and data sources.
• Build and refine detection analytics, dashboards, and reporting systems for SOC and security operations teams.
• Design automated reports and visual outputs such as trend views, heat maps, and leadership-ready dashboards.
• Support detection engineering by spotting unusual activity, attack indicators, and security control gaps.
• Check data quality and validate security telemetry across different sources.
• Bring together and standardize data from SIEM, EDR, IAM, cloud, network, endpoint, and vulnerability management systems.
• Create automation scripts in Python and/or PowerShell to improve processing, enrichment, and day-to-day efficiency.
• Work closely with incident response and threat hunting teams to enhance use cases and monitoring coverage.
• Prepare practical intelligence summaries and operational metrics for cybersecurity leaders.
• Assist in developing analytics models and detection logic for new and emerging threats.
• Keep clear documentation for analytics processes, detection rules, and reporting standards.

What we are looking for

• More than 5 years of experience in cybersecurity, SOC operations, security analytics, or detection engineering.
• Strong knowledge of SOC processes, detection engineering, incident response, threat hunting, security monitoring, and SIEM tools.
• Hands-on experience working with large security data sets, normalization, enrichment, telemetry analysis, and dashboard creation.
• Experience with report automation, heat map creation, and KPI/KRI reporting.
• Practical programming and automation ability using Python and PowerShell; SQL is an advantage.
• Familiarity with enterprise security technologies such as SIEM, EDR/XDR, firewall logs, IDS/IPS, cloud security platforms, IAM systems, vulnerability scanners, endpoint telemetry, and network traffic analysis tools.
• A Bachelor’s or Master’s degree in Data Science, Cybersecurity, Computer Science, Information Security, or another related technical field.

Preferred certifications

• CISSP
• GCIA
• GDSA
• GCDA
• CDP
• CAP
• Any other relevant cybersecurity or data analytics certification

Application documents

• Current CV or resume
• Examples of dashboards or reporting screenshots
• Samples of automation or scripting work
• Proof of security analytics or detection engineering experience
• Relevant certifications