Senior Detection Engineer & Threat Hunting Lead

<p>Are you a cybersecurity expert who thinks like an attacker? At Randstad Digital, we are looking for a Senior Detection Engineer &amp; Threat Hunting Lead to drive our threat detection and hunting programmes. This is a high-ownership, hands-on role where you will design elite detections, lead incident responses, and eventually build a team around you to secure leading organizations.</p> <p><strong>your responsibilities</strong></p> <ul> <li> <p>Detection Engineering: Design and maintain SIEM/XDR detection rules with full lifecycle ownership.</p> </li> <li> <p>Gap Analysis: Map coverage blind spots against threat actor TTPs (MITRE ATT&amp;CK).</p> </li> <li> <p>Incident Response: Lead L2/L3 incident response, containment, and remediation efforts.</p> </li> <li> <p>Purple Teaming: Run breach &amp; attack simulations to validate detection coverage.</p> </li> <li> <p>Detection-as-Code: Build and manage frameworks using CI/CD pipelines and version control.</p> </li> <li> <p>Threat Hunting &amp; Intel: Execute hunting hypotheses and translate threat feeds into actionable alerts.</p> </li> <li> <p>Testing &amp; Compliance: Act as the blue team counterpart for red team, TIBER, and DORA testing.</p> </li> <li> <p>Community: Represent the company in industry groups (ISACs, CSIRTs).</p> </li> </ul> <p><strong>your profile</strong></p> <ul> <li> <p>Experience: Several years of hands-on experience in Detection Engineering, SOC, or CSIRT roles.</p> </li> <li> <p>Tech Stack: Deep knowledge of SIEMs (Sentinel, Splunk, QRadar) and SOAR automation.</p> </li> <li> <p>Skills: Expert in attacker TTPs, digital forensics, and incident handling.</p> </li> <li> <p>Languages: Trilingual in English, Dutch, and French.</p> </li> <li> <p>Leadership: Ready to lead a functional working group or mentor a growing team.</p> </li> </ul> <p><strong>nice to have</strong></p> <ul> <li> <p>Background in Government, Defense, Banking, or Critical Infrastructure (OT/ICS).</p> </li> <li> <p>Python scripting for security automation.</p> </li> <li> <p>Certifications: CISSP, CISM, or specialized Threat Hunting/Intel tracks.</p> </li> </ul> <p> </p>