Cyber Detection Engineer

About the role

Sopra Steria, a leading Norwegian consulting firm in digitalisation, innovation and sustainability, is looking for several colleagues for its cybersecurity detection team in Oslo. You will build detection rules and scenarios that uncover real threats before they get a foothold, working with SOC and IRT teams on threat hunting.

Key responsibilities

• Develop detection rules in Microsoft Sentinel, Splunk ES, SentinelOne and other SIEM/EDR tools
• Analyse raw data and log streams to find anomalies and patterns
• Contribute to Threat Hunting activities and develop use cases
• Work closely with SOC and IRT teams to test and improve detection rules
• Dokumentere and share insights to strengthen the professional community and continuous learning

Required profile

• At least 3 years of experience in a SOC/CSIRT, with deep knowledge of log analysis and investigation
• Experience developing detections in SIEM and EDR platforms
• Good understanding of log formats and data models
• Knowledge of frameworks such as MITRE ATT&CK or Sigma
• Curious and explorative mindset, eager to experiment with new technology

What we offer

• Work with security environments at critical infrastructure companies and global corporations
• Internal expert groups and support for courses, certifications and professional development
• A strong collegial environment with shared knowledge
• Insurance and pension arrangements, full pay during parental leave, access to company facilities and an extra week of holiday (six weeks total)