Back to all jobs
Visible on IKONS todayNewPopular
North HollandHybridHours negotiable<3months
Join a security team to help build and enhance capabilities for detecting and responding to threats across web applications, mobile applications, APIs, and supporting services.
- This role sits at the intersection of Security Engineering, Software Development, and AI-driven Security Operations.
- You will develop and tune security detections, improve the telemetry that powers them, enhance AI-assisted alert triage capabilities, and build safe, scalable response automation.
- The ideal candidate combines strong security analytics expertise with hands-on software engineering skills and experience working with AI-powered systems.
What you do
- Design, build, test, and maintain security detections and anomaly detection capabilities within SIEM platforms.
- Develop detection coverage for threats including:
- Account takeover
- Automated abuse and bot activity
- Enumeration attacks
- Authentication and session misuse
- Access control failures
- Suspicious access to sensitive data
- Collaborate with Product, Engineering, and Platform teams to improve logging, telemetry quality, event coverage, and attribution.
- Build and enhance AI-powered triage capabilities, including:
- Agent workflows
- Tool integrations
- Context enrichment
- Escalation logic
- Decision quality measurement
- Design and implement incident response workflows and investigation playbooks.
- Develop security automation that safely enriches, routes, and responds to security events.
- Implement automation controls including approvals, auditability, monitoring, rollback mechanisms, and failure handling.
- Continuously evaluate detection effectiveness, investigate gaps, reduce false positives, and improve operational outcomes using responder feedback.
- Apply software engineering best practices including version control, testing, backtesting, and staged deployments.
What they ask
- Experience building or operating production software or security systems.
- Hands-on experience with:
- SIEM platforms
- Detection engineering
- Security analytics
- Alert tuning
- Strong understanding of web, mobile, and API security threats.
- Proficiency in at least one modern programming language such as Python, Go, or Java.
- Experience building, integrating, or extending AI agents and LLM-powered applications.
- Knowledge of:
- Agent orchestration
- Tool integrations
- Context enrichment
- LLM evaluation
- AI safety controls
- Strong understanding of logging, telemetry, event schemas, and data quality.
- Experience designing and deploying automation in secure production environments.
- Excellent communication skills with the ability to collaborate across Security, Engineering, and Platform teams.
Desirable.
- Behavioural analytics and anomaly detection.
- Machine learning applied to security use cases.
- Security orchestration and automated response (SOAR).
- Incident response and containment workflows.
- Web and mobile application security testing.
- Threat hunting and security investigations.
- Infrastructure as Code (IaC).
- CI/CD and modern DevOps practices.
How to apply
View the full assignment text and application details once your tailored application is ready.
Order a tailored application to view the full assignment and application details.
More context, less searching.
You get enough context to judge whether this job is relevant. The full brief, client details and next steps stay available inside the app.