← ALL OPEN ROLES
KUWAIT CITY / HYBRID · FULL-TIME · ENGINEERING
Detection Engineer
Maintain the 1,780-rule detection library as code, with pre-merge replay against historical telemetry.
What you will do
- Write, test and retire detections in a version-controlled repository
- Build replay harnesses that catch rule decay before production does
- Publish detection logic alongside the research team’s teardowns
What we are looking for
- Strong Python or Go, and real Git discipline
- Understanding of ATT&CK as a testing framework, not a poster
- Experience measuring precision and recall on live data
Find out what your telemetry is already telling you.
Two-week assessment: we ingest your existing logs, run the Sentinel detection pack, and hand back a prioritised findings report. No agents, no commitment.