Posted 2 days ago
Detection Engineer
@ Arobas Personnel Inc.
Montréal, Quebec
Overview
Arobas Personnel is hiring a Detection Engineer on a contract basis for one of its clients in Montreal. The role supports a Splunk-based detection environment, tuning rules and building new detections mapped to MITRE ATT&CK, and works closely with Incident Response, CTI, SOC and Red Team teams.
Responsibilities:
- Tune Splunk rules from Incident Response requests
- Design and deploy new detections from CTI-provided TTPs
- Map detections to MITRE ATT&CK coverage
- Develop detection content for Purple Team exercises
- Track and close work items in Jira
Requirements summary:
- Strong hands-on Splunk experience including SPL and data models
- Proven SIEM detection engineering in production
- Working knowledge of MITRE ATT&CK
- Familiarity with EDR, Windows/Linux, network and cloud logs
- Threat hunting experience with CTI IOCs and TTPs
Tools & skills
Source and dates
Source type not verified · tbe
- Employer posting date
- 2026-11-04
- First seen by our source
- 2026-11-04
- Source record updated
- 2026-11-04
These dates describe the source record, not a live verification that the employer is still hiring. Check the original posting.
Job details
| Seniority | Senior |
| Department | Software development |
| Hours per week | 40 (estimated) |
| Travel | air: none · ground: none |
| Work setting | Office |
| Position | Mostly sitting |
| Physical demands | physical low · computer high |
| Languages | English |
Summary and details written by AI from the posting; the employer’s posting is the authority.
Arobas Personnel Inc.
Saved company profile
Historical company information from a saved The Jobs API profile (LinkedIn/Crunchbase fields). It is not live-verified; figures may have changed. Missing values remain unknown.
Arobas est une firme spécialisée en recrutement et en services-conseils TI/IA.
Full company description
For over 25 years, Arobas Personnel has supported organizations across Canada, the United States, and internationally in talent acquisition, specialized recruitment, and IT/AI consulting services. We deliver recruitment solutions and executive leadership hiring. Our AMP and Controlled Goods (CGC) certifications ensure rigorous, compliant processes tailored to public, parapublic, and highly regulated sectors. Alongside our local recruitment services, we offer a global offshore staffing program, giving companies access to highly skilled professionals while achieving significant cost savings. Fast, reliable, and results-driven, Arobas acts as a strategic partner for organizations seeking efficient, high-impact recruitment solutions aligned with their business objectives. Permit number : AP-2000563
- LinkedIn followers
- 17,626
- People associated on LinkedIn
- 37
- Reported office locations
- Montréal, Québec, CA
- Orlando, Florida, US
- Paris, FR
- Other recorded names
- Arobas Personnel
- Specialties
- recrutement
- services-conseils
- placement de personnel
- Location de personnel
- C-level executive
- Information Technology
- Headhunting
- informatique
- technologie de l'information
- Projets informatique
- IT staffing
- recruiter
- sourcing
- agence de recrutement
- Staff augmentation
- contract staffing
- offshore staffing
- and Services conseil IA
- Profile identifies a recruitment agency
- Yes
For over 25 years, Arobas Personnel has supported organizations across Canada, the United States, and internationally in talent acquisition, specialized recruitment, and IT/AI consulting services. We deliver recruitment solutions and executive leadership hiring. Our AMP and Controlled Goods (CGC) certifications ensure rigorous, compliant processes tailored to public, parapublic, and highly regulated sectors…
| Field | Value |
|---|---|
| Industry | Staffing and Recruiting |
| Company size | 51-200 employees |
| Headquarters | Montréal, Québec |
| Organization type | Privately Held |
| Year founded | 2001 |
| Specialties | recrutementservices-conseilsplacement de personnelLocation de personnelC-level executiveInformation TechnologyHeadhuntinginformatiquetechnologie de l'informationProjets informatique |
| Open jobs on Jobsy | 47 |
| View page |
Arobas Personnel is looking for an experienced Detection Engineer for a contract opportunity with one of our clients in Montreal.
The Detection Engineer will support the organization’s Splunk-based detection environment, working closely with Incident Response, Cyber Threat Intelligence, SOC, and Red Team stakeholders to strengthen detection coverage and improve the quality of security detections.
Key Responsibilities :
🔹 Ensure operational continuity of the Splunk-based detection stack
🔹 Review and implement rule tuning requests from the Incident Response team, including false-positive reduction, logic refinement, and threshold adjustments
🔹 Design, develop, and deploy new Splunk detections based on threat patterns, indicators, and TTPs provided by the CTI team
🔹 Map new and existing detections to MITRE ATT&CK to track detection coverage
🔹 Develop and refine detection content for Purple Team exercises, incorporating identified gaps and post-exercise improvements
🔹 Test and validate detection effectiveness before production deployment, including true-positive validation and noise reduction
🔹 Maintain detection logic under version control and document tuning rationale
🔹 Track and manage work items in Jira
🔹 Participate in handoffs and collaboration sessions with Incident Response, CTI, SOC, and Red Team stakeholders
Key Deliverables :
🔹 Tuned and updated Splunk detection rules addressing Incident Response requests, with documented rationale
🔹 New detection use cases covering CTI-identified threat patterns, mapped to MITRE ATT&CK
🔹 Detection content supporting Purple Team exercises, including post-exercise improvements
🔹 Up-to-date documentation of detection logic and coverage gaps
🔹 Work items properly tracked and closed in Jira
Must-Have Skills :
🔹 Strong hands-on experience with Splunk, including SPL, correlation searches, dashboards, data models, and detection-as-code workflows
🔹 Proven Detection Engineering experience writing, tuning, and validating SIEM detection rules in a production environment
🔹 Working knowledge of MITRE ATT&CK for threat modeling and coverage mapping
🔹 Familiarity with relevant security telemetry and log sources, including EDR, Windows/Linux/Sysmon, network, and cloud logs
🔹 Experience with Threat Hunting methodologies and CTI-provided IOCs/TTPs, including structured intelligence such as STIX/TAXII or narrative reporting
🔹 Understanding of Incident Response processes and the ability to translate tuning requests into actionable detection rule changes
Nice to Have :
🔹 Exposure to Purple Teaming and adversary emulation, including tools or approaches such as Atomic Red Team and Caldera
🔹 Scripting skills with Python and/or PowerShell for detection logic, automation, and tooling
🔹 Experience with Git for managing detection content as code
🔹 Experience with Jira in an Agile or operational environment
🔹 Ability to clearly document technical decisions and rationale for handoff to technical teams and management
Journal
Only you can see this. Kept on this device, and in your account when you sign in.