Detection Engineer
Read straight from Darktrace's careers page, verified 4d ago.Seekless can tailor your résumé to it.
Seekless can write your résumé for this posting first.
Before you apply
LocationCambridge Office
Work modeon-site
Typefull-time
SeniorityMid
Company size1,001–5,000 people
PostedOct 15, 2026 · 3w ago
Verified live4d ago
At a glanceSummarised by Seekless from the posting.
Hands-on experience using security platforms to conduct thorough incident investigations
Strong understanding of cybersecurity concepts and networking
Comfortable analysing endpoint telemetry to identify suspicious activity, validate detections and support incident response
Comfortable working independently and proactively, taking ownership of work and driving improvements
Genuine interest in keeping up to date with the latest cybersecurity threats, techniques and trends
Experience analysing telemetry across one or more additional domains, such as Network, Identity, SaaS, Cloud or OT environments
Experience reviewing, assessing, developing, tuning or maintaining threat detection logic
Strong analytical and creative problem-solving skills
Strong time management, prioritisation and attention to detail
Experience with Darktrace products, such as Network, Identity, Cloud, Response or Endpoint
Experience working within a Managed SOC, Incident Response or Detection Engineering team
Experience with GitLab or a similar version-control platform
Experience with data analysis, statistics, or developing tooling and automation using Python or other programming languages
Skills
Python
GitLab
Benefits
Health insurance
Life insurance
Pension
Family leave
Employee assistance program
Cycle to work scheme
Paid time off
About the company
Darktrace is a global leader in AI-driven cybersecurity, helping organizations stay ahead of evolving threats every day.
Darktrace was built on a genuinely differentiated idea: that Adaptive AI could detect and respond to novel, real-time cyber threats. That approach matters more than ever in the era of AI. Today, our customers depend on us to stay ahead.
At Darktrace, we are energized by that responsibility. We work across teams and rally around a shared goal. We own outcomes end to end - step in, step up and see things through without waiting to be asked. We make decisions with urgency, say the hard thing, and hold each other to high standards with care and directness. We move first and learn fast anticipating where our customers are going next, continuously challenging ourselves.
We invest in the skills, learning and opportunities that help people deliver at the level their roles demand, and reward the aptitude and curiosity to grow beyond them.
Our Values: Own It | Win as One | Raise Our Bar | Move First. Learn Fast
Job Description:
This role would suit someone with hands-on cybersecurity experience who enjoys investigating threats, solving complex problems and continuously improving detection capabilities.
What will I be doing?
As a Detection Engineer, you’ll join a global team responsible for the continuous development and improvement of our threat detection capabilities across a range of key product areas. You’ll respond to customer requests and incidents, analyse cyber threat intelligence, and use your findings to continually improve our detection coverage.
You’ll be expected to:
•
Develop and expand detection schemes to support new products and areas of coverage, aligning detections with relevant threats and attack techniques.
•
Analyse cybersecurity incidents and emerging adversary techniques to identify opportunities for new detections and improvements to existing coverage.
•
Support customer investigations and incident response activities, prioritising time-sensitive and high-priority issues.
•
Collaborate with Development, Security Research, SOC and customer-facing teams to improve detection quality, investigative workflows, internal tooling and processes.
You’ll have the autonomy to drive the development of new detections and take ownership of identifying areas where our existing detection sets can be improved.
What experience do I need?
You’ll have hands-on experience using security platforms to conduct thorough incident investigations, with a strong understanding of cybersecurity concepts and networking. You’ll also be comfortable analysing endpoint telemetry to identify suspicious activity, validate detections and support incident response.
Ideally, your experience will include:
•
Analysing telemetry across one or more additional domains, such as Network, Identity, SaaS, Cloud or OT environments.
•
Reviewing, assessing, developing, tuning or maintaining threat detection logic.
•
Strong analytical and creative problem-solving skills.
•
Strong time management, prioritisation and attention to detail.
You’ll be comfortable working independently and proactively, taking ownership of your work and driving improvements to detection sets. A genuine interest in keeping up to date with the latest cybersecurity threats, techniques and trends is also important.
Beneficial skills:
It would be beneficial if you have experience with some of the following:
•
Darktrace products, such as Network, Identity, Cloud, Response or Endpoint.
•
Working within a Managed SOC, Incident Response or Detection Engineering team.
•
GitLab or a similar version-control platform.
•
Data analysis, statistics, or developing tooling and automation using Python or other programming languages.
Benefits:
•
23 days’ holiday + all public holidays, rising to 25 days after 2 years of service,
•
Additional day off for your birthday,
•
Private medical insurance which covers you, your cohabiting partner and children,
•
Life insurance of 4 times your base salary,
•
Salary sacrifice pension scheme,
•
Enhanced family leave,
•
Confidential Employee Assistance Program,
•
Cycle to work scheme.
Legal
As a growing business strengthening its governance and controls, this role plays a part in supporting high standards of integrity and accountability.
Darktrace is an Equal Opportunity Employer. We consider all qualified applicants for employment without regard to race, color, religion, sex (including pregnancy, childbirth, and related medical conditions), sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, veteran or military status, or any other characteristic protected by applicable federal, state, or local law.
Darktrace is committed to providing reasonable accommodations to qualified individuals with disabilities in accordance with applicable laws. If you require a reasonable accommodation to participate in the application or interview process, please contact your Talent Partner.