{"id":1663377,"url":"https://alion.io/job/cabot-corporation-detection-engineering-lead","title":"Detection Engineering Lead","company":{"id":2038736,"name":"Cabot Corporation","domain":"cabotcorp.com","url":"https://alion.io/company/cabotcorp","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":86,"open_postings":20,"ghost_share":0,"stale_share":0.55,"repost_share":0,"time_to_fill_p50_days":51,"computed_at":"2026-10-15T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Riga, Latvia"],"countries":["LV"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":2700,"max":3900,"currency":"EUR","period":"month","gross":true,"usd_annual":52872},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"IBM QRadar","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"NIST CSF","optional":true}],"status":"live","first_seen_at":"2026-09-24T00:00:00Z","employer_posted_date":"2026-09-24","last_verified_at":"2026-10-15T10:32:35Z","board_verified":true,"closed_at":null,"days_open":21,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":21},"description":"Cabot Corporation (NYSE: CBT) is a leading global specialty chemicals and performance materials company headquartered in Boston, Massachusetts, USA.\nOur businesses deliver a broad range of products and solutions to customers in every corner of the globe, serving the transportation, infrastructure, environment and consumer industry sectors. We bring the power of innovative chemistry to solve customers' challenges today while preparing them to meet tomorrow’s needs. Our commitment to innovation is driven by a passion to advance our customers' businesses through our deep understanding of their applications and the global trends that impact their operations.\nIf you do not meet every requirement, or your experience is slightly different that what we have listed, we still encourage you to apply!\nYour Role at Cabot\nAs the Detection Engineering Lead, you will design, build, and continuously improve Cabot’s threat detection capabilities. Working in a hybrid model with internal teams and an external managed detection partner, you will help ensure security threats are identified quickly and effectively across our global manufacturing environment.\nYou will lead the development of detection content, improve monitoring capabilities, and help shape the future of cybersecurity operations at Cabot.\nThis role reports to the Cybersecurity Operations Services Manager.\nHow You Will Make an Impact\nLead the design, development, testing, and improvement of security detection content across Cabot’s monitoring platforms.\nContinuously improve detection capabilities to increase visibility and reduce security risk.\nDefine and maintain telemetry and logging requirements needed for effective threat detection.\nWork with internal teams and external security providers to improve detection quality and operational effectiveness.\nSupport threat hunting, incident response, and investigations by providing detection expertise and insights.\nDevelop and maintain threat-informed detection strategies aligned with frameworks such as MITRE ATT&CK.\nPromote detection engineering best practices, including version control, testing, peer reviews, and automation.\nTrack and report on detection coverage, effectiveness, and key performance metrics.\nWhat You Will Bring to Cabot\n5+ years in security operations, detection engineering, or threat detection, with clear depth in detection content development.\nDeep hands-on expertise with a major enterprise SIEM (for example Splunk, Microsoft Sentinel, Elastic, Trellix, QRadar, or equivalent).\nProven detection-content development and tuning at scale.\nStrong command of MITRE ATT&CK, log pipelines, and threat detection methodology.\nExperience working alongside or governing a managed detection provider (MDR / MSSP).\nScripting and query fluency (Python, a SIEM query language such as KQL or SPL, and regex).\nExcellent written and spoken English; this is our working language across a global team.\nExperience That Strongly Aligns\nGlobal industrial, manufacturing, or OT-adjacent environments.\nSecurity platform migration or consolidation programs.\nMaturing or scaling a detection engineering capability.\nAdditional Experience (Nice to Have)\nIndustry certifications: GCDA, GCIA, GCDN, Splunk or Sentinel certifications, OSCP.\nFamiliarity with security frameworks (NIST CSF, MITRE ATT&CK).\nMeasures of Success\nMITRE ATT&CK coverage of relevant techniques.\nImprovement in mean time to detect and respond (MTTD / MTTR).\nReduction in false-positive rate and analyst noise.\nSuccessful platform onboarding and tuning milestones.\nQuality of partner escalations measured against the defined bar.\nAdditional Information\nWorking hours: 9:00-17:30. Occasional flexibility outside standard working hours may be needed to support critical cybersecurity initiatives, major platform changes, or incident response activities.\nPermanent contract.\nSalary: EUR 2,700-3,900 gross per month. The final salary offer will depend on the candidate’s previous experience and qualifications.\nHealth insurance from the first day of employment.\nMonthly allowance and annual bonus.\nHybrid work schedule: 3 days on site and 2 days working from home.\nHow We’ll Support Your Success:\nDynamic, Flexible, Hard Working, Team Environment - We are busy, collaborative, growing, and we are doing really meaningful work.\nHybrid Work Environment - The autonomy to both work from home 2 days a week and develop/sustain colleague relationships in the office 3 days a week.\nBenefits, Vacation, Etc. - We offer a competitive package of benefits.\nFeedback - we are committed to giving and receiving feedback in a direct and open fashion.\n Support - you are part of a team and deserve to feel encouraged and supported. You will be part of a team that cares about you personally and professionally. Our success depends on your success.\n#LI-HYBRID\nAt Cabot, we bring the power of innovative chemistry and a spirit of partnership with our customers to advance solutions that will enable a sustainable future. Our strength in research and development is a major reason why we have been an industry leader for more than 135 years in products such as reinforcing and specialty carbons, battery materials, aerogel, fumed metal oxides, inkjet colorants, masterbatches and conductive compounds.\nOur employees around the world are united by our shared purpose: Creating materials that improve daily life and enable a more sustainable future. Through our corporate strategy, “Creating for Tomorrow,” we are focused on our core strengths to lead in performance and sustainability - today and into the future.","description_format":"text","description_chars":5581,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":["Health insurance","Hybrid work"],"hiring_locations":[{"name":"Latvia","iso":"LV","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Manufacturing","Plastics & Polymers","Security Operations","Chemical Manufacturing"],"lifecycle":[{"event":"open","at":"2026-10-02T04:54:22Z"}],"visa":[],"liveness":{"score":56,"band":"ok","label":"Likely open","p_open":1,"p_active":0.619,"p_room":0.9,"age_days":21,"expected_fill_days":51,"reasons":["conf:0","stale_co","velocity","win:mid"],"computed_at":"2026-10-15T05:46:00Z"},"pay":{"stated_usd_annual":52872,"is_top_pay":false},"html_url":"https://alion.io/job/cabot-corporation-detection-engineering-lead","json_url":"https://alion.io/job/cabot-corporation-detection-engineering-lead.json","meta":{"generated_at":"2026-10-15T14:30:27Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":22176,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2038736},"rest":"https://alion.io/mcp/rest/get_company?id=2038736"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcabot-corporation-detection-engineering-lead"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcabot-corporation-detection-engineering-lead"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcabot-corporation-detection-engineering-lead"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cabot-corporation-detection-engineering-lead\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcabot-corporation-detection-engineering-lead"}]}