{"id":2665725,"url":"https://alion.io/job/darktrace-detection-engineer","title":"Detection Engineer","company":{"id":148,"name":"Darktrace","domain":"darktrace.com","url":"https://alion.io/company/darktrace","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":86,"open_postings":15,"ghost_share":0,"stale_share":0.533,"repost_share":0.067,"time_to_fill_p50_days":31,"computed_at":"2026-10-16T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Cambridge, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":68000,"max_usd":155000,"period":"year","method":"role_country_seniority_unknown","sample_n":140},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Darktrace","optional":false},{"name":"GitLab","optional":false},{"name":"Kubernetes","optional":false}],"status":"live","first_seen_at":"2026-10-15T00:00:00Z","employer_posted_date":"2026-10-15","last_verified_at":"2026-10-16T08:04:50Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"Darktrace is a global leader in AI-driven cybersecurity, helping organizations stay ahead of evolving threats every day.\nDarktrace was built on a genuinely differentiated idea: that Adaptive AI could detect and respond to novel, real-time cyber threats. That approach matters more than ever in the era of AI. Today, our customers depend on us to stay ahead.\nAt Darktrace, we are energized by that responsibility. We work across teams and rally around a shared goal. We own outcomes end to end - step in, step up and see things through without waiting to be asked. We make decisions with urgency, say the hard thing, and hold each other to high standards with care and directness. We move first and learn fast anticipating where our customers are going next, continuously challenging ourselves.\nWe invest in the skills, learning and opportunities that help people deliver at the level their roles demand, and reward the aptitude and curiosity to grow beyond them.\nOur Values: Own It | Win as One | Raise Our Bar | Move First. Learn Fast\n\nJob Description:\nWhat will I be doing?\nAs a Detection Engineer, you will be working in a small, global team, working on the continuous development of our threat detection model deck, whilst responding to customer requests and incidents, and reviewing and processing cyber threat intelligence.\nYou will be expected to:\nWork on building out new model decks to cover areas such as Endpoint and Kubernetes\nAddress customer queries and respond to cyber incidents, prioritising time-sensitive and high-priority issues\nAnalyse cybersecurity incidents in depth, to be able to identify areas for improvement of the model deck\nSelf-drive development of new models, and identify areas for improvement of existing models\nCollaborate with various stakeholders within Darktrace, such as Development, Analyst, and customer-facing teams\nDevelop and enhance internal tooling and processes\nWhat experience do I need?\nTo be suited for the role, you must have hands-on experience using the Darktrace product suite to carry out thorough investigations, analysing model alerts and associated traffic/activity in depth.\nYou should also have some experience with the Platform model editor, e.g. assisting customers with creating custom models, or tuning existing models.\nYou will also be expected to be able to work independently, pro-actively and be self-driven; you will be responsible for driving improvement of the model deck.\nOther prerequisites for the role:\nFamiliarity with a range of Darktrace products, including Network, Identity, Cloud, Response, Endpoint\nKnowledge of basic cybersecurity concepts, and a passion for staying up-to-date on the latest cybersecurity trends\nStrong analytical skills, and an ability to solve problems creatively\nStrong time management and prioritisation skills\nBeneficial skills:\nExperience working with endpoint based security platforms\nExperience building detections with endpoint telemetry\nExperience working with Gitlab\nExperience in any programming language\n\nBenefits:\n23 days’ holiday + all public holidays, rising to 25 days after 2 years of service,\n\nAdditional day off for your birthday,\n\nPrivate medical insurance which covers you, your cohabiting partner and children,\n\nLife insurance of 4 times your base salary,\n\nSalary sacrifice pension scheme,\n\nEnhanced family leave,\n\nConfidential Employee Assistance Program,\n\nCycle to work scheme.\n\nAs a growing business strengthening its governance and controls, this role plays a part in supporting high standards of integrity and accountability.\n\nDarktrace is an Equal Opportunity Employer. We consider all qualified applicants for employment without regard to race, color, religion, sex (including pregnancy, childbirth, and related medical conditions), sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, veteran or military status, or any other characteristic protected by applicable federal, state, or local law.\nDarktrace is committed to providing reasonable accommodations to qualified individuals with disabilities in accordance with applicable laws. If you require a reasonable accommodation to participate in the application or interview process, please contact your Talent Partner.","description_format":"text","description_chars":4269,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Health insurance","Life insurance","Parental leave"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Network Security","Information Security","Security Operations","Email Security"],"lifecycle":[{"event":"open","at":"2026-10-16T02:23:19Z"}],"visa":[{"country":"GB","licensed_sponsor":true,"evidence":"Licensed UK visa sponsor (Skilled Worker)","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Skilled Worker","cap_exempt":false,"checked_at":"2026-10-16T06:21:30+00:00","sources":["UK Home Office: register of licensed sponsors (workers)"],"filings_for_role_12m":0}],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":1,"expected_fill_days":31,"reasons":["conf:3","stale_co","velocity","win:early"],"computed_at":"2026-10-16T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/darktrace-detection-engineer","json_url":"https://alion.io/job/darktrace-detection-engineer.json","meta":{"generated_at":"2026-10-17T00:09:58Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":195,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":148},"rest":"https://alion.io/mcp/rest/get_company?id=148"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdarktrace-detection-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdarktrace-detection-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdarktrace-detection-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/darktrace-detection-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdarktrace-detection-engineer"}]}