Cybersecurity Detection Engineer

Cybersecurity Detection Engineer – Linux & Kubernetes

Remote within the EU | Freelance / B2B | ASAP

At HR Partners, we are looking for an experienced Cybersecurity Detection Engineer to join a long-term project within a major European institutional environment.

This opportunity is ideal for a cybersecurity professional with strong hands-on experience in Linux security, containerised environments, Kubernetes, and threat detection engineering.

Key Responsibilities

• Design, develop, implement, and maintain threat detection rules based on cyber threat intelligence and adversary techniques.
• Engineer and optimise detection use cases for Linux workloads, including containerised and cloud-native environments.
• Integrate and validate security telemetry from container runtimes, Kubernetes audit logs, and cloud environments.
• Perform proactive threat hunting and translate findings into production-ready detection rules.
• Improve detection accuracy by reducing false positives and optimising alerting mechanisms.
• Collaborate with incident response and security engineering teams.
• Maintain technical documentation, detection specifications, and operational procedures.

Required Qualifications & Experience

• Minimum 2 years of post-secondary education in IT, Cybersecurity, Computer Science, or a related field.
• At least 6 years of relevant professional experience, including substantial experience in cybersecurity or detection engineering.
• Strong Linux security expertise.
• Proven hands-on experience in detection engineering for containerised environments.
• Solid knowledge of Kubernetes security, audit logging, RBAC, and common attack techniques.
• Practical experience with Falco, Sysdig, or equivalent container runtime detection tools.
• Experience developing, testing, deploying, and maintaining security detection rules.
• Advanced English communication skills.
• EU citizenship and current residence within the European Union.
• Eligibility for EU security clearance.

Nice to Have

• Experience with SIEM platforms, particularly Splunk Enterprise Security.
• Knowledge of Risk-Based Alerting.
• Experience with Git, CI/CD, and DevSecOps practices.
• AWS or Azure cloud security experience.
• French language skills (B2).

Contract Details

• Contract: Freelance / B2B.
• Duration: 220 working days, with potential renewal.
• Location: Remote from within the European Union.
• On-site presence: Up to 20 days per year in Luxembourg, plus 5 additional onboarding days.
• Travel expenses: Not reimbursed.
• Start date: ASAP.

If you have strong expertise in Linux, Kubernetes, and threat detection engineering, we would love to hear from you!

Apply now and join an exciting international cybersecurity project.

HR Partners | Connecting Companies & People