Detection Engineering Specialist (W/M/X)

Job Description

As a Detection Engineering Specialist, you will act as a technical expert responsible for advancing Ubisoft’s detection engineering capabilities through modern software engineering, automation, cloud-native technologies, and Detection-as-Code practices.

Working closely with Security Operations, Incident Response, Platform Engineering, and Development teams, you will help transform our existing detection ecosystem into a scalable and maintainable engineering platform. The ideal candidate combines strong DevOps and software engineering skills with a passion for automation, cloud technologies, and security-focused problem solving.

You will evaluate telemetry and enrichment sources, design and maintain detection content, build integrations and automation, and contribute to the adoption of engineering best practices that improve the speed, quality, and reliability of security detections across Ubisoft's global environment.

Responsibilities

• Evaluate log sources, telemetry feeds, and enrichment data to determine their quality, structure, coverage, and detection value.
• Design, develop, test, document, deploy, and maintain detection rules, frameworks, and supporting technologies.
• Drive the migration of detection content into a Detection-as-Code model using version control and modern software development methodologies.
• Develop and maintain CI/CD pipelines to automate validation, testing, deployment, and lifecycle management of detection content.
• Build integrations and workflows leveraging APIs and MCP-based interactions across SIEM platforms, EDR solutions, ticketing systems, cloud services, and data repositories.
• Develop automation solutions that improve operational efficiency and reduce manual effort.
• Collaborate with Security Operations and Incident Response teams to improve detection coverage, fidelity, and investigative capabilities.
• Create reusable tooling, libraries, and frameworks that support detection engineering initiatives.
• Implement secure coding practices, code reviews, testing strategies, and quality controls throughout the engineering lifecycle.
• Support technologies such as Sigma, Sysmon, Falco, and cloud-native security telemetry platforms.
• Contribute to infrastructure automation and platform engineering initiatives involving public cloud and containerized environments.
• Research emerging technologies and innovative approaches that improve detection engineering outcomes.
• Translate business and project requirements into clear technical specifications and implementation plans.
• Communicate complex technical concepts effectively to audiences with varying levels of technical expertise.
• Develop and maintain technical documentation, standards, and operational procedures.

Qualifications

Required

• Experience in software engineering, DevOps, platform engineering, site reliability engineering, or automation-focused roles.
• Strong experience with Git-based development workflows and source control management.
• Experience designing and maintaining CI/CD pipelines.
• Proficiency in one or more programming or scripting languages such as Python, Go, PowerShell, JavaScript, or similar.
• Experience integrating platforms and services through APIs.
• Strong understanding of software development best practices, testing methodologies, and secure coding principles.
• Experience working with modern cloud platforms and infrastructure technologies.
• Excellent analytical, troubleshooting, and problem-solving skills.
• Strong communication skills with the ability to bridge technical and non-technical stakeholders.
• Ability to translate business requirements into technical requirements and effectively communicate those requirements to development teams.

Preferred

• Experience in Detection Engineering, Security Operations, Threat Detection, Incident Response, or Security Engineering.
• Familiarity with SIEM, EDR, and enterprise logging platforms.
• Experience with Sigma rules, Sysmon, Falco, or related detection technologies.
• Experience with Docker, Kubernetes, and containerized environments.
• Experience with AWS, Azure, GCP, or multi-cloud environments.
• Knowledge of MITRE ATT&CK, OWASP, and modern detection methodologies.
• Experience leveraging AI-powered development workflows, including agentic coding, automated code review, unit testing, linting, context management, and iterative improvement processes.
• Familiarity with MCP (Model Context Protocol), AI skills development, and AI-assisted engineering workflows.