Senior Threat Detection Engineer

Senior Threat Detection Engineer – Elevate Cybersecurity with Cutting-Edge Detection Strategies

At COGNNA, we are redefining the standards of cybersecurity operations by fostering a culture of innovation, collaboration, and excellence. As a Senior Threat Detection Engineer, you will play a pivotal role in designing, implementing, and optimizing advanced threat detection frameworks that safeguard organizations against evolving cyber threats. This is an opportunity to merge technical expertise with strategic vision, driving the maturity of our Security Operations Center (SOC) while mentoring the next generation of cybersecurity talent.

In this dynamic role, you will lead the charge in transforming raw threat intelligence into actionable detection logic, ensuring our security platforms remain resilient and adaptive. Your work will directly impact how we identify, analyze, and respond to threats—making a tangible difference in the global fight against cybercrime.

Key Responsibilities

Your expertise will be instrumental in the following critical areas:

• Advanced Threat Detection Engineering: Develop high-fidelity correlation rules and behavioral detection mechanisms within COGNNA’s security platforms. Leverage adversary Tactics, Techniques, and Procedures (TTPs) from MITRE ATT&CK, threat intelligence, and vulnerability data to create robust, scalable detection strategies. Continuously refine detection logic to address emerging threats and close operational gaps by integrating new data sources and analytics.
• Automation and Detection Quality: Design and implement automated testing frameworks to ensure the reliability and effectiveness of detection rules over time. Maintain and enhance detection quality through continuous validation, optimization, and performance tuning.
• Platform Engineering and Optimization: Lead the architectural design and optimization of our Extended Detection and Response (XDR), Security Information and Event Management (SIEM), and SOC technology stacks. Streamline log ingestion pipelines, from parsing and normalization to enrichment, to improve data accuracy and reduce operational overhead. Develop scripts and automation tools (using Python and PowerShell) to enhance SOC efficiency and workflow integration across the security stack.
• Threat Hunting and Incident Response: Collaborate closely with threat intelligence and incident response teams to refine detection use cases and support proactive threat hunting initiatives. Provide expert-level Tier-3+ support for incident investigations, including forensic analysis and post-mortem reviews to prevent future breaches.
• SOC Maturity and Compliance: Drive improvements in SOC playbooks, Standard Operating Procedures (SOPs), and detection engineering workflows. Stay ahead of global and regional threat landscapes, ensuring our detection strategies evolve in tandem with adversary tactics. Align detection frameworks with regulatory compliance standards, including NCA ECC and SAMA CSF, to uphold the highest security benchmarks.
• Mentorship and Team Development: Foster a collaborative and high-performing SOC environment by mentoring junior engineers and sharing best practices. Act as a technical leader, inspiring innovation and continuous learning within the team.

Why This Role Matters

As a Senior Threat Detection Engineer at COGNNA, you will:

• Shape the future of cybersecurity by contributing to products that protect organizations worldwide.
• Work in a vibrant, on-site collaborative environment in our Almadina office, surrounded by like-minded experts passionate about cyber defense.
• Access unparalleled opportunities for professional growth, including certifications, advanced training, and exposure to cutting-edge technologies.
• Benefit from an ownership mindset through our Employee Stock Ownership Program (ESOP), aligning your success with COGNNA’s growth trajectory.
• Thrive in a culture that values trust, accountability, and measurable outcomes, where your contributions are recognized and celebrated.

What You’ll Bring to the Table

We are seeking a highly skilled and motivated professional with:

• Education: A Bachelor’s degree in Computer Science, Cybersecurity, or a related field.
• Experience: A minimum of three years of hands-on experience in developing, maintaining, and optimizing complex detection use cases. A deep understanding of attacker behavior, incident response fundamentals, and digital forensics is essential.
• Technical Proficiency:
  • SIEM Expertise: Mastery of SIEM query languages (SPL, KQL, Lucene), rule tuning, User and Entity Behavior Analytics (UEBA), and scaling detection frameworks for large-scale environments.
  • Endpoint Detection and Response (EDR): Extensive knowledge of EDR tools and endpoint detection tactics, including advanced threat hunting techniques.
  • Network Security: Proficient in packet analysis (Wireshark), Intrusion Detection/Prevention Systems (IDS/IPS), and NetFlow monitoring to identify and mitigate network-based threats.
  • Scripting and Automation: Advanced skills in Python and PowerShell for developing custom scripts, integrations, and workflow automations that enhance SOC efficiency.
  • Operating System Internals: Deep expertise in Windows, Linux, and macOS logging, artifacts, and forensic analysis to uncover subtle indicators of compromise.
  • Threat Intelligence: Ability to translate threat intelligence feeds into real-time detection logic, ensuring proactive defense mechanisms.
  • Cloud Security: Strong command of monitoring and securing Infrastructure-as-a-Service (IaaS), Platform-as-a-Service (PaaS), and Software-as-a-Service (SaaS) environments.
• Certifications (Preferred): Certifications such as SANS GIAC (GDAT, GMON, GCIA, GCTI, GCIH), Offsec (OSDA), INE (eCTHP, eCIR), or (ISC)² (CISSP, CSSLP) are highly valued but not mandatory.
• Soft Skills:
  • Exceptional analytical thinking and creative problem-solving to tackle complex cybersecurity challenges.
  • Exceptional communication skills in both English and Arabic, with the ability to produce clear, concise technical reports.
  • A collaborative and mentorship-driven approach to guide junior team members and foster a culture of continuous learning.
  • Self-motivation, resilience, and the ability to thrive under pressure while managing multiple priorities effectively.
  • A passion for cyber defense and a commitment to staying ahead of the evolving threat landscape.

Join COGNNA and be part of a mission-driven team that is redefining cybersecurity excellence. Your expertise will not only protect critical infrastructure but also inspire the next generation of security professionals.