We are looking for a Detection Engineer to join our team

Job title:

We are looking for a Detection Engineer to join our team

Company

TELENOR CYBERDEFENCE AS AVD FORNEBU

Job description

Telenor Cyberdefence AS is a wholly owned, newly started Nordic cyber security company in the Telenor Group. Telenor Cyberdefence AS’ ambition is to become a leading MSSP (Managed Security Services Provider) in the Nordic market, among other things by using Telenor’s unique access to threat intelligence to support our services. In addition to delivering modern managed security services, Telenor Cyberdefence AS will also offer specialist expertise through consultancy services and testing of infrastructure / applications with our Offensive Security team. Join our innovative team at Telenor Cyberdefence in the position as Detection Engineer – at our HQ in Oslo Fornebu, or at our offices in Grimstad.We are looking for a skilled and driven Detection Engineer to join our Detection team. In this role, you will design, implement, and optimize threat detection content within Microsoft Sentinel and Microsoft Defender XDR. You will play a critical role in identifying potential threats, building detection logic, and strengthening the overall security posture of our customers. The role involves also participating in Threat Hunting and Purple Team exercises. Key ResponsibilitiesDesign and implement custom detection rules across a variety of customers and environment, using Microsoft Sentinel and the Microsoft Defender XDR suiteContinuously monitor, test, and improve detection logic based on performance, coverage, and client-specific needsMaintain detailed documentation of detection logic, testing outcomes, and operational procedures.Contribute to our detection strategyPerform Threat Hunting across diverse client environments based on hypothesis-driven approaches and emerging threat intelligence.Participate in Purple Team exercises, working collaboratively with offensive security teams to validate and enhance detection coverage.Create automation workflows Required Qualifications2+ years of experience in a security operations, detection engineering, or threat hunting role.Strong hands-on experience with SIEM and XDR tools, including custom detection rule creation.Experience building detections from telemetry/logs across various sourcesExperience in Threat Hunting and familiarity with endpoint, identity, and cloud telemetry sources.Familiarity with MITRE ATT&CK, Unified Kill Chain and other relevant frameworks and threat modeling.Strong understanding of cybersecurity principles, attack techniques, incident response and threat modeling Preferred QualificationsExperience with Microsoft Sentinel and KQLExperience with Microsoft Defender XDR suite: Defender for Endpoint, Identity, Office 365, and Cloud AppsExperience with SOAR toolsPrior involvement in Purple Team engagementsKnowledge of scripting languages (PowerShell, Python)Relevant certifications, such as BTL1, BTL2, GCIH, GMON, OSTHRelevant Microsoft certifications (e.g., SC-200, AZ-500) are a plus We offer:An exciting opportunity working together in a dynamic team, in a newly established cyber security companyA visible and significant role in Telenor Cyberdefence, where you have the opportunity to make an actual difference in societyA job in a diverse international group of companies with many career opportunities, where you will have the possibility to develop and grow professionallyCompetitive compensation packageNew and modern office at Telenor Fornebu or GrimstadIf you are ready to take on this exciting opportunity, apply now and join our team!
Please note that due to the summer holidays, we will respond to applicants in early to mid-august.For more information about the position, please reach out to: Nathalie Molnar, Senior HR-Advisor,Om bedriftenTelenor Cyberdefence er en nyetablert, skybasert leverandør av sikkerhetstjenester med fokus på det nordiske markedet. Vi leverer moderne, automatiserte og skalerbare tjenester gjennom vårt døgnåpne Security Operations Center (SOC). Telenor Cyberdefence tilbyr spisskompetanse på skybaserte løsninger og cyber resiliens, og er et av de største og mest spesialiserte operative sikkerhetsmiljøene i Norge og Norden. Vår tjenesteportefølje består blant annet av Managed Detection & Response (MDR), Incident Response (IR), Red Teaming & TIBER. Telenor Cyberdefence vil også kunne tilby erfarne konsulenter innen en rekke fagområder for å ytterligere støtte våre tjenester, samt kundens behov. Alt dette tilbys fra kontorer i Grimstad og på Fornebu.SektorPrivatNettsted

Expected salary

Location

Fornebu, Viken

Job date

Thu, 03 Jul 2025 22:36:57 GMT

To help us track our recruitment effort, please indicate in your email/cover letter where (jobsineu.net) you saw this job posting.