Threat Detection Engineer L

About the Role

COGNNA is seeking a Threat Detection Engineer - L2 to join their team. This full-time role involves designing high-impact detection strategies, building automation, and enhancing Security Operations Center (SOC) capabilities. The engineer will also mentor cyber talent and collaborate with various teams including threat intelligence, incident response, and platform engineering. The position requires 2-5 years of relevant experience.

Key Responsibilities

• Develop high-fidelity correlation rules and behavioral detections within COGNNA's security platforms.
• Translate adversary TTPs (MITRE ATT&CK), threat intelligence, and vulnerability data into actionable detection logic.
• Identify detection gaps and integrate new data sources to address evolving threat landscapes.
• Automate detection testing and ensure ongoing detection quality.
• Lead the architecture and optimization of XDR, SIEM, and SOC technology stacks for scalability and resilience.
• Streamline log ingestion pipelines, covering parsing, normalization, and enrichment.
• Develop scripts and automations using Python and PowerShell to improve SOC efficiency.
• Integrate tools across the SOC stack to facilitate seamless workflows and response actions.
• Collaborate with intelligence and incident response teams to enhance detection use cases and support threat hunting activities.
• Provide Tier-3+ support for incident investigations and post-mortem analysis.
• Improve SOC playbooks, Standard Operating Procedures (SOPs), and detection engineering workflows.
• Stay informed on global and regional threats and adapt detection strategies accordingly.
• Ensure compliance with relevant standards such as NCA ECC and SAMA CSF.

Experience and Qualifications

Candidates should possess 2-5 years of experience in a relevant cybersecurity role. The role requires a strong understanding of threat detection methodologies, security platforms, and automation techniques.

Professional Development

COGNNA supports continuous growth through access to certifications, trainings, and opportunities to enhance expertise. The company also offers an ESOP program, allowing employees to benefit from COGNNA’s success.

Work Environment

This role is based in the Almadina office, emphasizing on-site collaboration with team members. COGNNA fosters a culture that empowers talent, encourages ownership, and recognizes outcomes.

Company Overview

COGNNA focuses on building cybersecurity products that protect organizations globally. The company values trust and collaboration within its team.