Cyber Security Detection Engineer

Overview

Join to apply for the Cyber Security Detection Engineer role at Wurth IT Malaysia Sdn. Bhd. .

Würth IT is the global IT service provider of the Würth Group, supporting security operations globally. Our Cyber Defense Center combines Security Operations, Threat Intelligence, and Research & Development to protect the organization on a global scale. We are expanding the Research & Development team to Malaysia to design and improve detection methods, automate responses, and enhance defensive capabilities.

About the Role

As a Cyber Security Detection Engineer, you will help develop, optimize, and maintain detection and response mechanisms that enable the Cyber Defense Center to identify and counter threats early. You will collaborate with SOC operations and global R&D colleagues to ensure Würth Group systems and networks remain resilient against evolving cyber threats.

Responsibilities

• Detection Engineering
• Design and maintain detection rules across SIEM and XDR platforms to identify suspicious activity and advanced attack patterns.
• Develop use cases and playbooks that standardize detection coverage and enable fast, repeatable incident response.
• Build and tune SOAR automation workflows to reduce manual effort, improve alert enrichment, and accelerate containment.
• Perform quality assurance and continuous tuning of detection logic to ensure accuracy and reduce false positives.
• Guarantee the integration and normalization of log sources so detections are reliable and based on high-quality data.
• Threat Hunting & Monitoring
• Support SOC Operations with analysis of security incidents, identifying improvements to existing detection coverage.
• Conduct hypothesis-driven threat hunting to proactively uncover hidden threats and anomalies that bypass automated rules.
• Use advanced analytics and intelligence feeds to close detection blind spots and strengthen resilience against evolving attacks.
• Collaborate with SOC during incidents, providing in-depth investigations into scope, root cause, and impact.
• Perform forensic analysis of compromised systems, logs, and binaries to reconstruct attacker activity.
• Reverse engineer malware and tools to understand adversary behavior, identify vulnerabilities, and develop countermeasures.
• Evaluate new detection technologies, frameworks, and methods for integration into the Cyber Defense Center.
• Partner with global R&D colleagues to advance detection engineering practices, contributing to long-term security architecture.
• Share insights and improvements back into the SOC playbooks, ensuring knowledge gained becomes part of standard operations.

Qualifications

Education / Experience

Technical Expertise

Why Join Us?

#J-18808-Ljbffr