Threat Detection COOP📣 Job Ad

About the Threat Detection COOP Role

COGNNA is seeking a Threat Detection COOP to join its team in Riyadh. This full-time role involves designing detection strategies, developing automation, and enhancing Security Operations Center (SOC) operations. The position offers an opportunity to collaborate with various teams and contribute to advanced cybersecurity initiatives.

Advanced Threat Detection Engineering

In this role, you will be responsible for building high-fidelity correlation rules and behavioral detections within COGNNA's security platforms. This includes translating adversary tactics, techniques, and procedures (TTPs) from frameworks like MITRE ATT&CK, along with threat intelligence and vulnerability data, into actionable detection logic. You will also identify detection gaps, introduce new data sources to address evolving threats, and automate detection testing to maintain quality over time.

Platform Engineering and Optimization

This position involves contributing to the architecture and optimization of XDR, SIEM, and SOC technology stacks for scalability and resilience. Key responsibilities include streamlining log ingestion pipelines, from parsing to normalization and enrichment. You will also build scripts and automations, primarily using Python and PowerShell, to improve SOC efficiency and integrate tools across the SOC stack to enable seamless workflows.

Threat Hunting and Incident Response Support

Collaboration with threat intelligence and incident response teams is a core aspect of this role. You will work to enrich detection use cases and support threat hunting activities. Additionally, you will provide Tier-3+ support for incident investigations and post-mortem analysis.

SOC Maturity and Compliance

This role contributes to improving SOC playbooks, standard operating procedures (SOPs), and detection engineering workflows. Staying updated on global and regional threats and evolving detections accordingly is essential. Ensuring compliance alignment with relevant standards, such as NCA ECC and SAMA CSF, is also a key responsibility.

Work Environment and Growth

The Threat Detection COOP will be based in COGNNA's Riyadh office, working alongside other experts. The role offers opportunities for continuous growth through access to certifications and training. COGNNA fosters a culture of trust, empowering talent and encouraging ownership.