**Attackers innovate every day. So do we.**

At Northwave, we believe effective cybersecurity starts long before an incident occurs. Our Detection, Quality \& Stack (DQS) team is responsible for the technical foundation of our SOC, creating and maintaining the detections, tooling and automation that protect organizations across the Netherlands and Europe.

We're looking for a **Detection Quality Engineer (Medior/Senior)** who loves turning threat intelligence, attack research and adversary behavior into high-quality detections that make a real-world impact.

If you get excited by attack chains, KQL, Purple Teaming, threat hunting, and continuous improvement of detection capabilities, this role was built for you.

#### **What you'll be doing**

**Detection Engineering**

* Design, build and continuously improve detection rules and monitoring content.

* Develop advanced detection logic using Microsoft Sentinel, Microsoft Defender and other security platforms.

* Translate attack techniques and adversary behavior into actionable detections.

* Tune, validate and optimize detections to maximize signal and minimize noise.

**Threat Research**

* Research emerging threats, attack campaigns and TTPs.

* Analyze intelligence from MISP, CERT advisories, Red Team exercises and threat reports.

* Map threats to frameworks such as MITRE ATT\&CK and the Cyber Kill Chain.

* Identify gaps in monitoring coverage and proactively address them.

**Continuous Improvement**

* Improve SOC monitoring capabilities through automation and innovation.

* Contribute to Purple Team initiatives and validation of detection coverage.

* Work on strategic projects that enhance the quality, scalability and effectiveness of our MDR services.

* Help shape the future of detection engineering within Northwave.

**Collaboration \& Communication**

* Work closely with analysts, engineers, threat intelligence specialists and Red Team members.

* Document detections and provide guidance to operational teams.

* Explain detection logic, use-case design choices and monitoring strategies to both technical and non-technical stakeholders.