{"id":2413810,"url":"https://alion.io/job/stefanini-detection-engineer-product-security","title":"Detection Engineer - Product Security","company":{"id":4425653,"name":"Stefanini EMEA","domain":"stefanini.ro","url":"https://alion.io/company/stefanini-ro","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartSearch","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bucharest, Romania"],"countries":["RO"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":36000,"max_usd":107000,"period":"year","method":null,"sample_n":4493},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Anomaly Detection","optional":false},{"name":"CI/CD","optional":false},{"name":"Java","optional":false},{"name":"LLM","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Tool Use","optional":false}],"status":"live","first_seen_at":"2026-10-12T12:00:00Z","employer_posted_date":"2026-10-13","last_verified_at":"2026-10-14T05:36:25Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Join Product Security to build and improve how we detect and respond to threats across our client's web and mobile applications, APIs, and supporting services. You will develop SIEM detections, improve the telemetry behind them, strengthen AI-agent-assisted alert triage, and build carefully controlled response automation.\nWhat you'll do:\nBuild, test, and tune security detections and anomaly-detection jobs in a SIEM. Use version control, back testing, and staged releases to keep detections reliable\nDevelop coverage for threats such as account takeover, automated abuse, unusual traffic, enumeration, access-control failures, authentication and session misuse, and suspicious access to sensitive data\nIdentify the application events and fields needed for effective detection. Work with application and platform teams to improve event coverage, quality, and attribution. Design, build, and improve the AI triage agent itself\nDevelop its workflows, tool integrations, context enrichment, and escalation behavior; measure decision quality, reduce noise, and ensure uncertain or high-impact cases reach a human responder. Build incident workflows and response playbooks that enrich alerts, route them to the right responders, and provide clear investigation guidance\nIntroduce response automation in stages. Test actions, limit their scope, and provide appropriate human approvals, audit records, monitoring, and rollback\nEvaluate detection and response performance, investigate failures, and use responder feedback to improve the system.\nExperience building or operating production software or security systems\nPractical experience with SIEM queries, security analytics, detection development, or alert tuning Knowledge of web, mobile, or API security threats and how to detect them in application and security data\nAbility to write maintainable code and automation in a language such as Python, Go, or Java\nHands-on experience building, integrating, or extending AI agents or LLM-powered applications, including tool integrations, orchestration, evaluation, and safety controlsUnderstanding of logging, event schemas, data quality, and how telemetry gaps affect security detection\n\nExperience testing and deploying automation safely, including access control, auditability, failure handling, and rollback\nClear communication and the ability to work with security, application, and platform teams.\nHelpful experience:\nBehavioral analytics, anomaly detection, or machine-learning system\nAgent frameworks, tool-calling workflows, retrieval and context enrichment, and LLM evaluation Security orchestration, incident response, or containment playbooks\nWeb and mobile application security testing or investigation.\nInfrastructure as code and CI/CD practices.\nThe preceding job description had been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties and responsibilities required of employees assigned to this job.\nWhat we offer\nYou will find here not only a challenging and interesting workplace, but also a rewarding work experience, with competitive compensation and benefit packages:\nA dynamic and multinational environment with dedicated professionals who are ready to share their knowledge with you; \nSoft skills and technical training for current and emerging products and technologies;\nCareer development: opportunity to grow within the team;\nSpecial referral bonuses for recommending your friends;\nPrivate Medical subscription;\nMeal tickets;\nExtra vacation days;\nFlexible working hours and work from home, aligned with project needs;\nFriendly team who is eager to meet you.\nWhat's next:\nIt's best to apply today, because job postings can be taken down and we wouldn't want you to miss this opportunity. In case you need further information, just send us a message at  and we\"ll be happy to assist!\nDiversity & Inclusion\nHere at the Stefanini Group, we value plurality and equity, regardless of race, sexual orientation, disability, age, ancestry, religion, gender, and nationality. We understand and encourage the importance of being you!\nAbout us\nWe are the Stefanini group, a global tech consulting company of Brazilian origin that believes in the power of people to transform businesses through technology.\nWe are present in over 40 countries and operate with the purpose of co-creating solutions TOGETHER WITH OUR CLIENTS that accelerate results and improve the experience of people and organizations.\nHere, we like to say that technology is not the end, but the means: what really matters are the people who drive it all.\nOur mindset is AI First, meaning we invest in cutting-edge technology in everything we do, focusing on results for our clients.\nWe are a company, A GROUP, that breathes collaboration and offers a dynamic environment where you will learn by doing, grow alongside the team, and have space to contribute with ideas and projects.\nMore than just talking about digital transformation, we believe in real transformation that starts with people and impacts real businesses.\nIf you are looking for a place to develop, innovate, and be part of something bigger, the Stefanini Group is your place.\nWe want to inform you that there are currently scams targeting job seekers by falsely using our company\"s name, Stefanini. We sincerely apologize for any confusion or inconvenience this may have caused.\nPlease remember that legitimate job offers from Stefanini will always come through official channels, including direct communication with our trained recruiters. If you receive any unsolicited messages requesting payment or personal information, please disregard them.\nIf you suspect you\"ve been targeted, please contact us immediately at  for verification.\nKey Points to Remember:\n* Legitimate job offers only follow interviews conducted with our hiring managers or clients.\n* We will never ask for payment at any stage of the recruitment process.\nStay vigilant and feel free to reach out for verification. Your safety and security are our top priorities. Thank you for your understanding and cooperation.\nExperience building or operating production software or security systems\nPractical experience with SIEM queries, security analytics, detection development, or alert tuning Knowledge of web, mobile, or API security threats and how to detect them in application and security data\nAbility to write maintainable code and automation in a language such as Python, Go, or Java\nHands-on experience building, integrating, or extending AI agents or LLM-powered applications, including tool integrations, orchestration, evaluation, and safety controlsUnderstanding of logging, event schemas, data quality, and how telemetry gaps affect security detection\n\nExperience testing and deploying automation safely, including access control, auditability, failure handling, and rollback\nClear communication and the ability to work with security, application, and platform teams.\nHelpful experience:\nBehavioral analytics, anomaly detection, or machine-learning system\nAgent frameworks, tool-calling workflows, retrieval and context enrichment, and LLM evaluation Security orchestration, incident response, or containment playbooks\nWeb and mobile application security testing or investigation.\nInfrastructure as code and CI/CD practices.\nThe preceding job description had been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties and responsibilities required of employees assigned to this job.\nWhat we offer\nYou will find here not only a challenging and interesting workplace, but also a rewarding work experience, with competitive compensation and benefit packages:\nA dynamic and multinational environment with dedicated professionals who are ready to share their knowledge with you; \nSoft skills and technical training for current and emerging products and technologies;\nCareer development: opportunity to grow within the team;\nSpecial referral bonuses for recommending your friends;\nPrivate Medical subscription;\nMeal tickets;\nExtra vacation days;\nFlexible working hours and work from home, aligned with project needs;\nFriendly team who is eager to meet you.\nWhat's next:\nIt's best to apply today, because job postings can be taken down and we wouldn't want you to miss this opportunity. In case you need further information, just send us a message at  and we\"ll be happy to assist!\nDiversity & Inclusion\nHere at the Stefanini Group, we value plurality and equity, regardless of race, sexual orientation, disability, age, ancestry, religion, gender, and nationality. We understand and encourage the importance of being you!\nAbout us\nWe are the Stefanini group, a global tech consulting company of Brazilian origin that believes in the power of people to transform businesses through technology.\nWe are present in over 40 countries and operate with the purpose of co-creating solutions TOGETHER WITH OUR CLIENTS that accelerate results and improve the experience of people and organizations.\nHere, we like to say that technology is not the end, but the means: what really matters are the people who drive it all.\nOur mindset is AI First, meaning we invest in cutting-edge technology in everything we do, focusing on results for our clients.\nWe are a company, A GROUP, that breathes collaboration and offers a dynamic environment where you will learn by doing, grow alongside the team, and have space to contribute with ideas and projects.\nMore than just talking about digital transformation, we believe in real transformation that starts with people and impacts real businesses.\nIf you are looking for a place to develop, innovate, and be part of something bigger, the Stefanini Group is your place.\nWe want to inform you that there are currently scams targeting job seekers by falsely using our company\"s name, Stefanini. We sincerely apologize for any confusion or inconvenience this may have caused.\nPlease remember that legitimate job offers from Stefanini will always come through official channels, including direct communication with our trained recruiters. If you receive any unsolicited messages requesting payment or personal information, please disregard them.\nIf you suspect you\"ve been targeted, please contact us immediately at  for verification.\nKey Points to Remember:\n* Legitimate job offers only follow interviews conducted with our hiring managers or clients.\n* We will never ask for payment at any stage of the recruitment process.\nStay vigilant and feel free to reach out for verification. Your safety and security are our top priorities. Thank you for your understanding and cooperation.","description_format":"text","description_chars":10932,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Flexible schedule"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-10-13T02:45:44Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":1,"expected_fill_days":19,"reasons":["conf:0","win:early"],"computed_at":"2026-10-14T06:34:16Z"},"pay":null,"html_url":"https://alion.io/job/stefanini-detection-engineer-product-security","json_url":"https://alion.io/job/stefanini-detection-engineer-product-security.json","meta":{"generated_at":"2026-10-14T10:05:06Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":11555,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4425653},"rest":"https://alion.io/mcp/rest/get_company?id=4425653"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fstefanini-detection-engineer-product-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fstefanini-detection-engineer-product-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fstefanini-detection-engineer-product-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/stefanini-detection-engineer-product-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fstefanini-detection-engineer-product-security"}]}