Associate Detection Analyst

About the role

Build and improve the detection and automation capabilities within the Security Operations function. Work with senior analysts and engineers to develop detection rules, automate response workflows, and enhance the tooling that underpins our managed security services.

Key responsibilities

• Build positive working relationships across Brennan and with customers, assist in workshops and support clear communication of detection outcomes.
• Write and tune detection rules across SIEM, EDR/XDR, and email security platforms.
• Develop and maintain automated response playbooks in SOAR and orchestration tools.
• Document detection logic, automation workflows, and engineering decisions while reducing false positives.

Required profile

• At least 1 year of hands‑on experience in scripting, security tooling, or a technical support role.
• Recently completed a degree or certification in IT, cybersecurity or a related field.
• Strong attention to detail and an analytical approach to writing and testing detection logic.
• Ability to clearly document detection rules, automation workflows and engineering processes.

Required skills

• Python
• PowerShell
• KQL (Kusto Query Language)
• Bash
• SIEM platforms (e.g., Microsoft Sentinel, Splunk)
• SOAR platforms (e.g., Microsoft Sentinel Playbooks, Palo Alto XSOAR, Shuffle)
• Detection rule formats (Sigma, YARA, Snort, Suricata)
• MITRE ATT&CK framework
• Git version control

What we offer

• Competitive remuneration and extensive benefits.
• Training and certification bonuses.
• Culture Awards and an all‑expenses‑paid trip for top performers.
• Vibrant social activities, discounted hardware/software, and a learning‑focused environment.