Detection Engineering & Automation Lead in Sachseln, Obwalden at Jobgether

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Detection Engineering & Automation Lead based in Switzerland.

Join an opportunity to shape and scale a growing Detection Engineering & Automation function while driving the evolution of modern cyber defense capabilities. In this leadership role, you will oversee the development of advanced detection strategies, security automation, and engineering best practices that improve threat visibility and accelerate incident response. Working closely with security operations, incident response, and engineering teams, you will help reduce alert fatigue, strengthen detection coverage, and optimize investigation workflows. This position offers significant ownership over detection lifecycle management and automation initiatives in a collaborative, remote-first environment. If you are passionate about building high-impact security capabilities and mentoring technical teams, this role provides the chance to make a lasting contribution to a mature and proactive security program.

• Lead and mentor the Detection Engineering & Automation team, setting priorities, driving delivery, and supporting the professional growth of team members.
• Own the full detection engineering lifecycle, from use-case design and implementation to testing, optimization, maintenance, and retirement of detection content.
• Develop and maintain SIEM and EDR detection rules, detection-as-code pipelines, security enrichment workflows, and SOAR automation playbooks.
• Collaborate with Security Operations, Incident Response, Cyber Defense, and engineering teams to improve detection quality, minimize false positives, and close visibility gaps.
• Align detection logic with attacker techniques, critical assets, telemetry sources, and incident response procedures to ensure comprehensive security coverage.
• Establish documentation, ownership, validation processes, and testing standards for critical detections while leading automation initiatives that safely accelerate investigations.

• Bachelor's degree or higher in Computer Science, Information Security, or a related technical discipline is preferred.
• At least 5 years of experience in Security Operations, Detection Engineering, Threat Detection, or Security Automation, including 2+ years focused on Detection Engineering.
• Previous experience leading or mentoring technical security teams.
• Strong hands-on expertise creating and tuning detection content using technologies such as Sigma, YARA, SIEM correlation rules, and detection-as-code methodologies.
• Experience developing SOAR automation playbooks and security integrations using Python or similar scripting languages.
• Solid understanding of MITRE ATT&CK, EDR, cloud, identity, and network telemetry, along with incident response processes and Detection Engineering performance metrics such as MTTD, MTTR, false-positive rates, and detection coverage.
• Professional working proficiency in English and upper-intermediate proficiency in Ukrainian or Russian.
• Experience within regulated financial environments, cloud-native security, threat intelligence, threat hunting, AI-assisted detection, or building Detection Engineering functions from an early maturity stage is considered an advantage.

• 20 paid vacation days per year.
• 10 paid sick leave days annually.
• Paid public holidays according to the approved holiday calendar.
• Medical allowance.
• Fully remote work opportunity.
• Professional development and education budget.
• Language learning budget.
• Wellness budget covering gym memberships, sports equipment, and related expenses.