Voltar para a lista

Descrição da vaga

Detection Engineering Manager em Lisboa, Portugal

Boston Consulting Group

Lisboa, Portugal

Who We Are Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we help clients with total transformation-inspiring complex change, enabling organizations to grow, building competitive advantage, and driving bottom-line impact. To succeed, organizations must blend digital and human capabilities. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures—and business purpose. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, generating results that allow our clients to thrive.

What You'll Do

As we build out our continuous monitoring and detection programme we require an experienced Detection Engineer to help fortify its technical foundation. You will be responsible for developing advanced detections grounded in our real threat landscape, validated against enterprise telemetry, and continuously improved over time. Using Splunk as our SIEM alongside native security platforms, you will build the detection capability that sits above operational alert triage—developing, validating, and maintaining the detections our Cyber Security Incident Response Team relies upon. Working across a large, evolving environment, you will translate offensive security findings into actionable detections that measurably strengthen BCG's global security posture. Effective detection engineering requires equal parts technical depth, threat knowledge, and disciplined process. This role sits at the intersection of all three - responsible for building a detection programme that is threat-led, evidence-based, and continuously validated against the techniques adversaries use. What you will do As a Senior Detection Engineer, you will help shape and mature BCG's global detection engineering capability. Working within Security Operations, you will combine hands-on detection engineering with technical leadership to ensure our detection programme remains threat-led, evidence-based, and continuously improves as the threat landscape evolves.
  • You will partner closely with Offensive Security, CSIRT, Security Engineering, Threat Intelligence, and our managed security provider to define detection priorities, establish engineering standards, and lead the development of high-confidence detections. Through technical leadership, mentoring, and ownership of complex engineering initiatives, you will help build a scalable detection capability that strengthens BCG's ability to identify and respond to cyber threats.
  • Lead the design, development, and continuous improvement of high-confidence detections across SIEM, EDR, and enterprise security platforms.
  • Define and maintain detection engineering standards, development practices, and quality expectations across the detection lifecycle.
  • Drive the detection engineering roadmap by translating threat intelligence, offensive security findings, and ATT&CK coverage analysis into prioritized engineering initiatives.
  • Lead complex detection engineering projects, providing technical leadership and mentoring to engineers while remaining actively involved in hands-on development.
  • Partner with Offensive Security to validate detections through purple team exercises, adversary emulation, and continuous testing.
  • Establish measurable approaches to detection quality, coverage, and effectiveness, using operational feedback to continuously improve detection content.
  • Guide the evolution of Detection-as-Code practices, engineering automation, and scalable detection development workflows.
  • Collaborate across Security Operations, Security Engineering, Infrastructure, and Threat Intelligence to strengthen BCG's overall detection capability and engineering maturity.

What You'll Bring

  • Extensive experience designing, developing, and maintaining production detection content across enterprise SIEM, EDR, and security monitoring platforms.
  • Deep knowledge of MITRE ATT&CK, adversary tradecraft, and threat-informed detection engineering, with the ability to translate complex attack techniques into scalable detection strategies.
  • Advanced expertise with Splunk SPL and experience developing, optimizing, and validating complex detection logic across diverse data sources.
  • Experience defining engineering standards, reviewing detection quality, and establishing repeatable practices that improve the effectiveness and maintainability of detection content.
  • Demonstrated ability to lead technical initiatives, mentor engineers, and provide technical direction while remaining actively engaged in hands-on engineering.
  • Experience validating detections through purple teaming, adversary emulation, atomic testing, or similar evidence-based approaches.
  • A pragmatic engineering mindset with the ability to balance detection coverage, operational efficiency, and measurable security outcomes.

Who You'll Work With

You will join BCG's Security Operations team and play a key role in advancing the firm's global detection engineering capability. You'll work closely with Detection Engineering, CSIRT, Offensive Security, Security Engineering, Threat Intelligence, and our managed security provider to ensure detection content is informed by evolving threats, supported by high-quality telemetry, and continuously validated. As a senior technical contributor, you'll mentor engineers, lead cross-functional engineering initiatives, and partner with teams across Cybersecurity to establish scalable detection engineering practices that strengthen BCG's ability to detect, investigate, and respond to cyber threats. #ISRM

Additional info

This job description reflects the core requirements of the role at the time of writing. Responsibilities may evolve as the detection engineering programme matures. Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, disability, protected veteran status, or any other characteristic protected under national, provincial, or local law, where applicable, and those with criminal histories will be considered in a manner consistent with applicable state and local laws. BCG is an E - Verify Employer. Click here for more information on E-Verify.

Vagas semelhantes

Mais vagas como esta

  • Remoto
  • Contrato
  • Gestao de produto

$159k USD - $215k USD

... clear go/no-go evidence for customer-facing teams - Turn design-partner feedback and customer-reported false positives into prioritized, owned engineering work Detection Quality & Coverage - Stand up and run a weekly detection quality loop: prioritized test corpus, automated FP/FN testing across browser and edge detection, ...

Portugal

  • Remoto
  • Contrato
  • Gestao de produto
  • Design

$82.3 USD

... against a real Argo CD environment, and at least one design partner uses it. The major architectural decisions are made and documented. You have delivered the engineering estimate and phased plan. How you’ll work You report to the VP of Engineering. The Product Manager for Kubernetes is your peer and owns the customer problem, ...

Portugal

Boston Consulting Group

Cybersecurity Manager - Lisbon

  • Ciberseguranca
... - Drive remediation from finding identification through confirmed closure, partnering with developers, cloud architects, security architects, and platform engineering teams. - Translate complex technical issues into precise, actionable remediation guidance for different engineering and security audiences. - Strengthen shift-left ...

Lisboa, Portugal

  • Híbrido
... requirements: Establish logging, telemetry, and monitoring requirements for identity services in partnership with Security Operations, which owns SIEM, detection engineering, and continuous monitoring. What You'll Bring - 6–10 years of experience in security architecture, infrastructure security, or security engineering. - Deep ...

Lisboa, Portugal

  • Remoto
  • Híbrido
... owns SIEM, detection engineering, and continuous monitoring. - Drive automation and policy-as-code adoption for network security controls, partnering with engineering to move enforcement and drift detection from manual review toward continuous, automated validation. What You'll Bring - Bachelors degree in a relevant field ...

Lisboa, Portugal

  • Híbrido
... requirements: Establish logging, telemetry, and monitoring requirements for identity services in partnership with Security Operations, which owns SIEM, detection engineering, and continuous monitoring. What You'll Bring - 610 years of experience in security architecture, infrastructure security, or security engineering. - Deep ...

Lisboa, Portugal

  • Tempo integral
  • Operacoes
... the SOC running smoothly – coverage, runbooks, triage, and escalation – while developing the analyst team. The SOC Manager works closely with the Cyber Case Manager to ensure incidents flow into case management and are tracked through to closure, and partners with Threat Detection Engineering, Cloud Security, Incident Response, ...

Lisboa, Portugal

  • Presencial
  • Contrato
  • Gestao de produto

$282 USD

... exciting journey and orchestrate the definition and execution of Feedzai’s Digital Trust Product vision & strategy. As a highly motivated and enthusiastic Product Manager at Feedzai you will play a crucial role in the development of our Digital Trust solution. You’ll be working across Research and Labs, Engineering, Data Science, ...

Portugal, Portugal

  • Remoto
  • Tempo integral
  • Contrato
  • Gestao de produto
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Product Manager (Finance and Account Management) based in Portugal. In this senior product leadership role, you will shape the strategy and roadmap for finance and account management products ...

Portugal

$200 USD

... Team The Incident Management team is responsible for maintaining service stability across 1GLOBAL's products and platforms. Working closely with Operations, Engineering, Product, NOC, and customer-facing teams, the team leads the response to operational incidents, drives service restoration, and continuously improves operational ...

Lisboa, Portugal