{"id":1898424,"url":"https://alion.io/job/dkb-code-factory-security-detection-engineer-xfm-dkb","title":"Security Detection Engineer (x/f/m) - DKB","company":{"id":673144,"name":"DKB Code Factory","domain":"dkbcodefactory.com","url":"https://alion.io/company/dkbcodefactory","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":82,"open_postings":7,"ghost_share":0,"stale_share":0.714,"repost_share":0,"time_to_fill_p50_days":42,"computed_at":"2026-10-14T06:34:16Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Berlin, Germany"],"countries":["DE"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":60000,"max_usd":131000,"period":"year","method":"role_country_seniority_unknown","sample_n":53},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"Linux","optional":false},{"name":"SIEM","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-10-05T08:30:48Z","employer_posted_date":"2026-10-12","last_verified_at":"2026-10-15T02:05:15Z","board_verified":true,"closed_at":null,"days_open":9,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":9},"description":"Welcome to DKB AG…. \nWe’re excited to share that our hiring process is now led by Code Factory (CoFa), DKB’s sister tech company, bringing a more agile and collaborative approach to building our cross-functional teams. While you’ll go through the hiring journey with CoFa, your employment will be with DKB, combining the stability of a leading bank with the speed and innovation of a tech-driven environment. Join us to be part of a team where collaboration and impact come first. \n{ { … a_place_to_stay_curious: [ \nHelp us shape how we detect cyberattacks!\nHow do you turn a current threat into reliable detection?\nAs a Security Detection Engineer (m/f/d), this is exactly the question you will focus on. You will analyze threat landscapes and attack techniques, derive relevant detection use cases, and develop the corresponding detection logic for our security systems.\nYou will support the entire detection lifecycle - from analyzing potential attack paths and developing and documenting detections to testing and continuously optimizing existing detection rules.\nWith your experience, you will actively help shape and advance DKB’s approach to cyberattack detection.\n} } ; \n{ your_responsibilities: [ \nYou develop use cases and detection rules to continuously improve attack detection across our SIEM, EDR, cloud, and other security systems.\nYou analyze current threats, attack techniques, and TTPs (Tactics, Techniques and Procedures) and translate them into suitable detection use cases, systematically applying the MITRE ATT&CK framework.\nYou analyze log and telemetry data and assess which data sources are relevant for detecting attack techniques and suspicious behavior.\nYou test and validate detection rules for effectiveness and continuously optimize them to reduce false positives while maintaining strong detection coverage.\nYou assess our existing detection coverage using MITRE ATT&CK, identify gaps in our attack detection capabilities, and develop appropriate measures to close them.\nYou work closely with colleagues in Threat Intelligence, Threat Hunting, and Incident Response, translating insights from security incidents and threat hunts into new or improved detection rules.\nTogether with your team, you further develop our Detection-as-Code processes and contribute to versioning, reviews, testing, and the automated deployment of detection content.\nYou contribute your ideas and experience to continuously improve our detection strategy, processes, measures, and tools.\n] } ; \n{ following_qualifications_would_be_in_line_with_our_desired_profile_for_this_position: [ \nYou have several years of professional experience in IT security and solid hands-on experience in Detection Engineering, ideally complemented by experience in Threat Hunting or a SOC environment.\nYou have strong knowledge of the MITRE ATT&CK framework and experience translating attack techniques and TTPs into concrete detection use cases.\nYou have experience with SIEM, EDR, or comparable detection platforms and are familiar with the relevant query and detection languages.\nYou have a good understanding of relevant security telemetry and log sources, for example from endpoint, identity, network, cloud, Windows, and Linux environments.\nYou work in a structured, analytical, and solution-oriented way and demonstrate a high degree of initiative and teamwork.\nYou have very good German skills and good written and spoken English skills.\nFor us, your practical expertise matters most: a specific university degree is not required. Whether you have completed vocational training or come from another professional background, you are welcome to apply if you have the relevant Detection Engineering experience.\n] } ; \nYou don’t match every single requirement? No worries! We encourage you to apply anyways, even if your qualifications do not align perfectly. You might still be just the right candidate for us! \n{ { …how_to_start_your_career_at_DKB: [ \nWe want you to feel good about working with us, to feel valued, and to be able to contribute fully. You can find out what makes us tick and whether DKB is the right employer for you even before you apply by following this link. } } ; \nBy the way: At our company, every person matters. We embrace fairness and diversity-no matter where you’re from, how old you are, or your sex, gender identity, sexual orientation, or religion, whether you have a disability or not-we genuinely look forward to every application!","description_format":"text","description_chars":4458,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["IT Consulting & Digital Transformation","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-10-05T09:37:51Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.9,"p_room":1,"age_days":8,"expected_fill_days":42,"reasons":["conf:4","velocity","win:early"],"computed_at":"2026-10-14T06:34:16Z"},"pay":null,"html_url":"https://alion.io/job/dkb-code-factory-security-detection-engineer-xfm-dkb","json_url":"https://alion.io/job/dkb-code-factory-security-detection-engineer-xfm-dkb.json","meta":{"generated_at":"2026-10-15T05:41:24Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8393,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":673144},"rest":"https://alion.io/mcp/rest/get_company?id=673144"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdkb-code-factory-security-detection-engineer-xfm-dkb"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdkb-code-factory-security-detection-engineer-xfm-dkb"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdkb-code-factory-security-detection-engineer-xfm-dkb"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/dkb-code-factory-security-detection-engineer-xfm-dkb\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdkb-code-factory-security-detection-engineer-xfm-dkb"}]}