Security Detection Engineer (x/f/m) - DKB

Posted 7 Days Ago
Be an Early Applicant
Berlin, DEU
In-Office
Mid level
Fintech • Software • Financial Services
The Role
Develop and optimize cyberattack detection use cases and rules across SIEM, EDR, cloud, and other security systems. Analyze threats, TTPs, logs, and telemetry using MITRE ATT&CK; validate detections, reduce false positives, identify coverage gaps, and automate detection-content deployment. Collaborate with threat intelligence, threat hunting, and incident response teams to improve detection strategy and processes.
Summary Generated by Built In

Welcome to DKB AG….  

We’re excited to share that our hiring process is now led by Code Factory (CoFa), DKB’s sister tech company, bringing a more agile and collaborative approach to building our cross-functional teams. While you’ll go through the hiring journey with CoFa, your employment will be with DKB, combining the stability of a leading bank with the speed and innovation of a tech-driven environment. Join us to be part of a team where collaboration and impact come first. 

{ { … a_place_to_stay_curious: [ 

Help us shape how we detect cyberattacks!

How do you turn a current threat into reliable detection?

As a Security Detection Engineer (m/f/d), this is exactly the question you will focus on. You will analyze threat landscapes and attack techniques, derive relevant detection use cases, and develop the corresponding detection logic for our security systems.

You will support the entire detection lifecycle – from analyzing potential attack paths and developing and documenting detections to testing and continuously optimizing existing detection rules.

With your experience, you will actively help shape and advance DKB’s approach to cyberattack detection.

} } ;  

{ your_responsibilities: [ 

  • You develop use cases and detection rules to continuously improve attack detection across our SIEM, EDR, cloud, and other security systems.
  • You analyze current threats, attack techniques, and TTPs (Tactics, Techniques and Procedures) and translate them into suitable detection use cases, systematically applying the MITRE ATT&CK framework.
  • You analyze log and telemetry data and assess which data sources are relevant for detecting attack techniques and suspicious behavior.
  • You test and validate detection rules for effectiveness and continuously optimize them to reduce false positives while maintaining strong detection coverage.
  • You assess our existing detection coverage using MITRE ATT&CK, identify gaps in our attack detection capabilities, and develop appropriate measures to close them.
  • You work closely with colleagues in Threat Intelligence, Threat Hunting, and Incident Response, translating insights from security incidents and threat hunts into new or improved detection rules.
  • Together with your team, you further develop our Detection-as-Code processes and contribute to versioning, reviews, testing, and the automated deployment of detection content.
  • You contribute your ideas and experience to continuously improve our detection strategy, processes, measures, and tools.

] } ; 

{ following_qualifications_would_be_in_line_with_our_desired_profile_for_this_position: [ 

  • You have several years of professional experience in IT security and solid hands-on experience in Detection Engineering, ideally complemented by experience in Threat Hunting or a SOC environment.
  • You have strong knowledge of the MITRE ATT&CK framework and experience translating attack techniques and TTPs into concrete detection use cases.
  • You have experience with SIEM, EDR, or comparable detection platforms and are familiar with the relevant query and detection languages.
  • You have a good understanding of relevant security telemetry and log sources, for example from endpoint, identity, network, cloud, Windows, and Linux environments.
  • You work in a structured, analytical, and solution-oriented way and demonstrate a high degree of initiative and teamwork.
  • You have very good German skills and good written and spoken English skills.

For us, your practical expertise matters most: a specific university degree is not required. Whether you have completed vocational training or come from another professional background, you are welcome to apply if you have the relevant Detection Engineering experience.

] } ; 

You don’t match every single requirement? No worries! We encourage you to apply anyways, even if your qualifications do not align perfectly. You might still be just the right candidate for us! 

{ { …how_to_start_your_career_at_DKB: [ 

We want you to feel good about working with us, to feel valued, and to be able to contribute fully. You can find out what makes us tick and whether DKB is the right employer for you even before you apply by following this link.} } ; 

By the way: At our company, every person matters. We embrace fairness and diversity—no matter where you’re from, how old you are, or your sex, gender identity, sexual orientation, or religion, whether you have a disability or not—we genuinely look forward to every application!

Skills Required

  • Several years of professional experience in IT security
  • Hands-on experience in detection engineering
  • Experience with threat hunting or a SOC environment
  • Strong knowledge of the MITRE ATT&CK framework
  • Experience translating attack techniques and TTPs into detection use cases
  • Experience with SIEM, EDR, or comparable detection platforms
  • Familiarity with relevant query and detection languages
  • Understanding of security telemetry and log sources across endpoint, identity, network, cloud, Windows, and Linux environments
  • Structured, analytical, solution-oriented working style with initiative and teamwork
  • Very good German skills
  • Good written and spoken English skills
Am I A Good Fit?
beta
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.

The Company
HQ: Berlin
153 Employees
Year Founded: 2018

What We Do

At Code Factory we believe that every big journey starts with a first step. Our destination: creating tomorrow's banking. Four million customers have already placed their faith in us. Their wind farms and schools depend on our code. We are forging the future of finance - today. As a subsidiary of DKB, we benefit from the financial backing and entrepreneurial expertise of an established company but enjoy the flexibility and agility of a startup. By encouraging unconventional ideas and working hand-in-hand with other fintech companies in the heart of Berlin, we are reshaping modern finance. Join us

Similar Jobs

Zscaler Logo Zscaler

Technical Success Manager

Cloud • Information Technology • Security • Software • Cybersecurity
Easy Apply
Remote or Hybrid
Germany
8697 Employees

Adyen Logo Adyen

Marketing Manager

Fintech • Payments • Financial Services
Easy Apply
Hybrid
3 Locations
4771 Employees

DFIN Logo DFIN

Account Executive

Fintech • Software
Remote or Hybrid
DE
1750 Employees

Circle (circle.so) Logo Circle (circle.so)

Lead Engineer, AI Platform

Artificial Intelligence • Consumer Web • Digital Media • Information Technology • Social Impact • Software
In-Office or Remote
43 Locations
250 Employees

Similar Companies Hiring

Ford Energy Thumbnail
Automotive • Software • Energy • Utilities • Manufacturing • Renewable Energy
US
55 Employees
Revel Thumbnail
Aerospace • Hardware • Robotics • Software
Marina Del Rey, California
70 Employees
Blee Thumbnail
Artificial Intelligence • Marketing Tech • Software
New York, New York
30 Employees

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account