Detection Engineer

Join Philips as a Detection Engineer on the Cyber Defense Capabilities team. You will design, implement, and validate detection logic for CSIRT, focusing on building high-fidelity rules, regression testing, and performing breach and attack simulations. This role involves close collaboration with incident responders and threat hunters to reduce the time to detect threats.

• Develop, test, and maintain detection rules and signatures in SIEM platforms
• Conduct regression testing to ensure detection accuracy and resilience
• Perform breach and attack simulations aligned with threat intelligence
• Map detection logic to MITRE ATT&CK framework and priority threat scenarios
• Integrate threat intelligence feeds and IOCs into detection workflows
• Automate enrichment, correlation, and triage processes using SOAR playbooks